libyal / libregfLinks
Library and tools to access the Windows NT Registry File (REGF) format
☆121Updated 10 months ago
Alternatives and similar repositories for libregf
Users that are interested in libregf are comparing it to the libraries listed below
Sorting:
- Library and tools to access the Windows New Technology File System (NTFS)☆210Updated last year
- Library and tools to access the Windows Prefetch File (SCCA) format.☆75Updated 6 months ago
- Windows Registry Knowledge Base☆176Updated 9 months ago
- Windows registry file format specification☆341Updated 6 years ago
- Open source implementations of Microsoft compression algorithms☆211Updated 4 years ago
- Kernel Pool Monitor☆126Updated 3 years ago
- windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or…☆137Updated 2 months ago
- A collection of free miscellaneous Windows tools☆135Updated 10 months ago
- Lnk file parser☆87Updated last month
- Expand compressed files from WinSxS folder☆158Updated this week
- Library and tools to access the Virtual Hard Disk (VHD) image format☆131Updated 11 months ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 9 years ago
- Named pipe I/O ETW provider for Windows☆70Updated 4 years ago
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆113Updated 6 months ago
- Run executables in an AppContainer☆123Updated 6 years ago
- A GUI version of the classic PoolMon tool☆113Updated 7 years ago
- ☆68Updated last week
- Parse Microsoft shim databases☆30Updated 6 months ago
- NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl☆37Updated 8 years ago
- X-Ways Forensic/ WinHex templates☆48Updated 3 years ago
- Yet another library library (and tools)☆211Updated 6 months ago
- Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks☆65Updated 3 years ago
- Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes☆234Updated last year
- Parser for $UsnJrnl on NTFS☆111Updated 2 years ago
- This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …☆31Updated 4 years ago
- An attempt to create a friendly version of WinDbg☆106Updated 7 years ago
- Import library generator for x86 PE files☆57Updated 6 years ago
- Full featured, offline Registry parser in C#☆231Updated this week
- Library and tools to access the Windows XML Event Log (EVTX) format☆210Updated 9 months ago
- NTFS samples☆25Updated 4 years ago