libyal / libpff
Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
☆285Updated 3 weeks ago
Related projects: ⓘ
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆109Updated last month
- Libewf is a library to access the Expert Witness Compression Format (EWF)☆263Updated 3 weeks ago
- Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.☆338Updated last month
- olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or…☆222Updated 7 months ago
- Python library to convert Microsoft Outlook .msg files to .eml/MIME message files.☆183Updated 2 months ago
- Command line utility and Python package to ease the (un)mounting of forensic disk images☆116Updated last year
- Yet another library library (and tools)☆201Updated last week
- Tool suite for inspecting NTFS artifacts.☆213Updated 10 months ago
- Python bindings for The Sleuth Kit (libtsk)☆90Updated 5 months ago
- Pure Python parser for Windows Registry hives.☆425Updated 9 months ago
- Library and tools to access the Windows New Technology File System (NTFS)☆186Updated 2 months ago
- Open source eDiscovery☆103Updated last month
- AFF is an open and extensible file format to store disk images and associated metadata.☆77Updated 5 months ago
- python eml parser module☆209Updated 4 months ago
- Commandline low level file extractor for NTFS☆272Updated 5 years ago
- Extracts emails and attachments saved in Microsoft Outlook's .msg files☆728Updated 3 weeks ago
- Open source Python library for NTFS analysis☆80Updated 6 years ago
- Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.☆50Updated this week
- Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache☆258Updated 3 years ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆429Updated this week
- Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes☆215Updated 2 months ago
- Extract $MFT record info and log it to a csv file.☆254Updated 9 months ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆188Updated 2 months ago
- Python script to parse the NTFS USN Journal☆105Updated 2 years ago
- PST extraction and analytic pipeline☆37Updated 6 years ago
- Tokenizer for raw mails☆367Updated 5 months ago
- An AFF4 C++ implementation.☆187Updated last year
- Checks with NSRL RDS servers looking for for hash matches☆111Updated 3 years ago
- Extract embedded files and macros from office documents.☆177Updated 9 months ago
- A Lotus Notes NSF to EML, MBOX and PST converter☆84Updated 5 years ago