libyal / libwtcdbLinks
Library and tools to access the Windows (Vista/7) Explorer thumbnail cache database format (thumbcache.db)
☆17Updated 11 months ago
Alternatives and similar repositories for libwtcdb
Users that are interested in libwtcdb are comparing it to the libraries listed below
Sorting:
- Library and tools to access the Microsoft Internet Explorer (MSIE) Cache File (index.dat) files☆16Updated last year
- Library for binary signature scanning.☆28Updated 11 months ago
- Library and tools to access the Windows SuperFetch database format☆12Updated last year
- Library and tools to access the executable (EXE) format☆44Updated last year
- History and analysis of Windows desktop images☆17Updated 4 years ago
- Portable Executable launcher for Windows NT bypassing loader☆71Updated 6 months ago
- A lightweight C++/C AFF4 reader library☆13Updated 2 years ago
- Powerful commandline $MFT record editor.☆24Updated 9 years ago
- Library and tools to access the Extended File System☆18Updated 7 months ago
- An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.☆26Updated last year
- Library and tools to access the Windows Prefetch File (SCCA) format.☆76Updated 7 months ago
- Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does…☆19Updated 6 months ago
- Dump Windows registry hives as text.☆16Updated 6 years ago
- Library and tools to access the Windows NT Registry File (REGF) format☆124Updated 11 months ago
- Library and tools to access the Master Boot Record (MBR) volume system format☆14Updated last year
- MALM: Malware Monitor☆50Updated 12 years ago
- Automatically exported from code.google.com/p/reverse-engineering-scripts☆18Updated 10 years ago
- ☆18Updated 12 years ago
- Library and tools to access the Windows Hibernation File (hiberfil.sys) format☆13Updated last year
- Library and tools to access the Mac OS Hierarchical File System (HFS)☆37Updated last year
- Plugin for x64dbg to generate Yara rules from function basic blocks.☆36Updated 7 years ago
- Library for Windows XML Event Log (EVTX) data types☆18Updated 10 months ago
- Carves EXEs from given data files, using intelligent carving based upon PE headers☆39Updated 8 years ago
- Extract compressed memory pages from page-aligned data☆46Updated 6 years ago
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆12Updated 4 years ago
- Library for Object Linking and Embedding (OLE) data types☆12Updated last year
- Recover event log entries from an image by heurisitically looking for record structures.☆27Updated 9 years ago
- Unpacking tool for Inno Setup installers☆37Updated last year
- Python tool to analyze PE file for patterns used by malware☆26Updated 2 years ago
- Digital Forensics Windows Registry (dfWinReg)☆52Updated last week