Digital Forensics Virtual File System (dfVFS)
☆217Feb 15, 2026Updated 2 weeks ago
Alternatives and similar repositories for dfvfs
Users that are interested in dfvfs are comparing it to the libraries listed below
Sorting:
- LNK to JSON☆14Mar 7, 2019Updated 6 years ago
- Digital Forensics Windows Registry (dfWinReg)☆54Dec 22, 2025Updated 2 months ago
- An NTFS/FAT parser for digital forensics & incident response☆217Oct 31, 2025Updated 4 months ago
- A framework for orchestrating forensic collection, processing and data export☆343Feb 18, 2026Updated last week
- Digital Forensics artifact repository☆1,207Feb 11, 2026Updated 2 weeks ago
- Yet another registry parser☆138Apr 15, 2022Updated 3 years ago
- Super timeline all the things☆2,017Feb 10, 2026Updated 2 weeks ago
- Python bindings for The Sleuth Kit (libtsk)☆112Nov 21, 2025Updated 3 months ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Tools for macOS Forensic Bootable media☆15May 20, 2020Updated 5 years ago
- Example programs used in the automating DFIR series☆63Mar 4, 2019Updated 6 years ago
- An updated C# port of X-Ways X-Tensions API.☆11Mar 12, 2018Updated 7 years ago
- NTFS file system specimens☆13Jul 3, 2023Updated 2 years ago
- Windows registry samples☆24Nov 18, 2018Updated 7 years ago
- Digital Forensics XML project and library☆68Jul 2, 2021Updated 4 years ago
- A modern Python-3-based alternative to RegRipper☆205Mar 31, 2025Updated 11 months ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆343Jun 25, 2022Updated 3 years ago
- Automation and Scaling of Digital Forensics Tools☆785Feb 19, 2026Updated last week
- Forensic Scanner☆41Nov 29, 2012Updated 13 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 5 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆22Oct 31, 2018Updated 7 years ago
- Tool suite for inspecting NTFS artifacts.☆226Nov 1, 2023Updated 2 years ago
- ☆18Mar 26, 2025Updated 11 months ago
- Digital Forensics date and time☆23Dec 22, 2025Updated 2 months ago
- ☆453Nov 21, 2024Updated last year
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆113Dec 20, 2025Updated 2 months ago
- Libewf is a library to access the Expert Witness Compression Format (EWF)☆298Dec 20, 2025Updated 2 months ago
- Regipy is an os independent python library for parsing offline registry hives☆266Jan 22, 2026Updated last month
- Carves and recreates VSS catalog and store from Windows disk image.☆99Jan 24, 2023Updated 3 years ago
- Discover potential timestamps within the Windows Registry☆19Apr 22, 2014Updated 11 years ago
- Registry Miner☆14Apr 10, 2018Updated 7 years ago
- Command line utility and Python package to ease the (un)mounting of forensic disk images☆127Feb 9, 2023Updated 3 years ago
- documentation, scripts, tools related to Zena Forensics (http://blog.digital-forensics.it)☆100Apr 21, 2017Updated 8 years ago
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Oct 27, 2019Updated 6 years ago
- Digital Forensic Investigative Scripts☆87Feb 6, 2026Updated 3 weeks ago
- Web App for Volatility framework☆390Jan 13, 2026Updated last month
- Web interface for the Volatility Memory Forensics Framework☆260Nov 21, 2017Updated 8 years ago
- Extract common Windows artifacts from source images and VSCs☆64May 10, 2021Updated 4 years ago
- The Python implementation of the AFF4 standard.☆45Nov 13, 2025Updated 3 months ago