Alternatives and similar repositories for libpff

Users that are interested in libpff are comparing it to the libraries listed below

• libratom / libratom
  Python library and supporting utilities to parse and process PST and mbox email sources
  ☆111Updated 2 weeks ago
• williballenthin / python-registry
  Pure Python parser for Windows Registry hives.
  ☆430Updated 5 months ago
• GOVCERT-LU / eml_parser
  python eml parser module
  ☆228Updated 7 months ago
• ralphje / imagemounter
  Command line utility and Python package to ease the (un)mounting of forensic disk images
  ☆123Updated 2 years ago
• libyal / libvshadow
  Library and tools to access the Volume Shadow Snapshot (VSS) format
  ☆113Updated 10 months ago
• decalage2 / olefile
  olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or…
  ☆245Updated 8 months ago
• TeamMsgExtractor / msg-extractor
  Extracts emails and attachments saved in Microsoft Outlook's .msg files
  ☆776Updated last month
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆223Updated last year
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆290Updated 5 years ago
• PacktPublishing / Learning-Python-for-Forensics
  Learning Python for Forensics by Packt Publishing
  ☆120Updated 2 years ago
• mvz / email-outlook-message-perl
  Email::Message Perl module for reading Outlook .msg files
  ☆185Updated last month
• py4n6 / pytsk
  Python bindings for The Sleuth Kit (libtsk)
  ☆101Updated 3 months ago
• williballenthin / python-ntfs
  Open source Python library for NTFS analysis
  ☆81Updated 7 years ago
• libyal / libyal
  Yet another library library (and tools)
  ☆210Updated 6 months ago
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆278Updated 10 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆481Updated 8 months ago
• sblosser / pyshadowcopy
  Python class to create, work with and delete volume shadow copies on Windows
  ☆30Updated 4 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆203Updated 2 years ago
• aff4 / Standard
  AFF4 Standard Documents
  ☆29Updated 3 years ago
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆114Updated 4 years ago
• enferex / pdfresurrect
  Analyze and help extract older "hidden" versions of a pdf from the current pdf.
  ☆87Updated 2 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆210Updated 6 months ago
• mkorman90 / regipy
  Regipy is an os independent python library for parsing offline registry hives
  ☆257Updated this week
• vikramarsid / msg_parser
  Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.
  ☆56Updated 6 months ago
• strozfriedberg / ntfs-linker
  An NTFS journal parser
  ☆82Updated 9 years ago
• libyal / libfsntfs
  Library and tools to access the Windows New Technology File System (NTFS)
  ☆210Updated 11 months ago
• libyal / libesedb
  Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
  ☆351Updated 10 months ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆195Updated 3 months ago
• libyal / winreg-kb
  Windows Registry Knowledge Base
  ☆176Updated 8 months ago
• grierforensics / officedissector
  Static analysis tools for Microsoft Office Open XML files and documents
  ☆70Updated 7 years ago