libyal / libpff
Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
☆310Updated 8 months ago
Alternatives and similar repositories for libpff
Users that are interested in libpff are comparing it to the libraries listed below
Sorting:
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆111Updated 9 months ago
- olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or…☆242Updated 6 months ago
- Yet another library library (and tools)☆207Updated 4 months ago
- Python bindings for The Sleuth Kit (libtsk)☆98Updated 2 months ago
- Libewf is a library to access the Expert Witness Compression Format (EWF)☆273Updated 8 months ago
- Tool suite for inspecting NTFS artifacts.☆221Updated last year
- Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.☆54Updated 5 months ago
- Extracts emails and attachments saved in Microsoft Outlook's .msg files☆771Updated last month
- python eml parser module☆226Updated 6 months ago
- Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes☆233Updated 10 months ago
- Command line utility and Python package to ease the (un)mounting of forensic disk images☆122Updated 2 years ago
- Open source eDiscovery☆113Updated 2 months ago
- Library and tools to access the Windows New Technology File System (NTFS)☆207Updated 10 months ago
- Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.☆348Updated 9 months ago
- Python script to parse the NTFS USN Journal☆111Updated 2 years ago
- Open source Python library for NTFS analysis☆80Updated 7 years ago
- Learning Python for Forensics by Packt Publishing☆120Updated 2 years ago
- Forensic Scripts☆151Updated last month
- Checks with NSRL RDS servers looking for for hash matches☆114Updated 4 years ago
- Python library to convert Microsoft Outlook .msg files to .eml/MIME message files.☆213Updated 3 months ago
- Digital Forensics Virtual File System (dfVFS)☆207Updated 4 months ago
- Pure Python parser for Windows Registry hives.☆428Updated 3 months ago
- Regipy is an os independent python library for parsing offline registry hives☆255Updated last week
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Updated 5 years ago
- Script to recover deleted entries in an SQLite database☆187Updated 9 years ago
- AFF4 Standard Documents☆28Updated 3 years ago
- Parser for $UsnJrnl on NTFS☆110Updated 2 years ago
- Commandline low level file extractor for NTFS☆285Updated 5 years ago
- The Python implementation of the AFF4 standard.☆45Updated last year
- An NTFS journal parser☆82Updated 9 years ago