libyal / libolecf
Library and tools to access the OLE 2 Compound File (OLECF) format
☆67Updated last month
Related projects: ⓘ
- Library and tools to access the Windows Shortcut File (LNK) format☆190Updated 3 months ago
- Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance☆105Updated 4 months ago
- Open source implementations of Microsoft compression algorithms☆205Updated 4 years ago
- See your trace statements in Sysinternals Process Monitor☆82Updated 9 years ago
- Library and tools to access the Mac OS Hierarchical File System (HFS)☆32Updated 2 months ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆70Updated last month
- StraceNT - Strace for Windows☆128Updated 8 years ago
- Yet another library library (and tools)☆201Updated last week
- Library and tools to access the Windows NT Registry File (REGF) format☆103Updated last month
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 9 years ago
- A reader for OLE Compound Document Files (like OleFileIO, but better)☆28Updated 5 years ago
- A library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.☆166Updated 3 months ago
- A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.☆53Updated 4 years ago
- Run executables in an AppContainer☆115Updated 5 years ago
- File and libmagic for Windows☆102Updated 4 years ago
- A cross-platform library for verifying Authenticode signatures☆136Updated last month
- windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or…☆127Updated 3 weeks ago
- Windows registry file format specification☆319Updated 5 years ago
- Lnk file parser☆78Updated 2 weeks ago
- Lints an authenticode signed binary.☆37Updated last year
- Library and tools to access the Windows Minidump (MDMP) format☆32Updated 2 months ago
- Library and tools to access the Windows New Technology File System (NTFS)☆186Updated 2 months ago
- RE-lab is a joint effort of gimp.ru team and developers of various open source projects to do clean-room reverse engineering of various p…☆76Updated 3 years ago
- An example sandbox using AppContainer (Windows 8+)☆129Updated 4 years ago
- Library and tools to access the Microsoft Internet Explorer (MSIE) Cache File (index.dat) files☆16Updated last month
- Named pipe I/O ETW provider for Windows☆66Updated 4 years ago
- Library and tools to access the Windows Event Log (EVT) format☆57Updated 2 months ago
- High-performance tracing for C++ Windows/Windows Phone Store apps☆14Updated 9 years ago
- Print compiler information stored in Rich Header of PE executables.☆122Updated last week
- Example of real-time Windows ETW packet capture session☆52Updated 7 years ago