Windows registry file format specification
☆376Oct 27, 2018Updated 8 years ago
Alternatives and similar repositories for regf
Users that are interested in regf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Yet another registry parser☆143Apr 15, 2022Updated 4 years ago
- Low-level MS Windows registry files analysis tools☆19May 5, 2016Updated 10 years ago
- Library and tools to access the Windows NT Registry File (REGF) format☆142Oct 10, 2026Updated 3 weeks ago
- Windows registry samples☆24Nov 18, 2018Updated 7 years ago
- An NTFS/FAT parser for digital forensics & incident response☆245Oct 31, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows Registry Knowledge Base☆206Sep 27, 2026Updated last month
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- Win 10/11 related research☆203Dec 19, 2023Updated 2 years ago
- Parser for $LogFile on NTFS☆221Jun 5, 2026Updated 4 months ago
- Binary commandline executable to parse ETL files☆69Jun 7, 2018Updated 8 years ago
- Windows Live Artifacts Acquisition Script☆195Jun 20, 2022Updated 4 years ago
- Commandline low level file extractor for NTFS☆326Jul 30, 2019Updated 7 years ago
- Tools from WFA 4/e, timeline tools, etc.☆146Feb 29, 2024Updated 2 years ago
- Hypervisor-based debugger☆192Dec 2, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆320Aug 14, 2020Updated 6 years ago
- Miscellaneous Scripts☆17Sep 11, 2020Updated 6 years ago
- OpenLV helps first responders quickly and safely interact with potential evidence much as if they sat down and interacted with a suspect …☆12May 13, 2014Updated 12 years ago
- ☆15Mar 8, 2017Updated 9 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- ☆10Oct 3, 2012Updated 14 years ago
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆914Jun 18, 2025Updated last year
- A rewrite of mactime, a bodyfile reader☆41Aug 5, 2024Updated 2 years ago
- Set of tools to analyze Windows sandboxes for exposed attack surface.☆2,346Oct 19, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Regipy is an os independent python library for parsing offline registry hives☆278Oct 18, 2026Updated 2 weeks ago
- This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows☆486Apr 17, 2018Updated 8 years ago
- Decompile an x86 exe, and read PE infos.☆19Sep 29, 2018Updated 8 years ago
- A modern Python-3-based alternative to RegRipper☆220May 12, 2026Updated 5 months ago
- Digital Forensics artifact repository☆1,284Updated this week
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆13May 8, 2026Updated 5 months ago
- The history of Windows Internals via symbols.☆180Nov 4, 2021Updated 4 years ago
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- Source code for File Test - Interactive File System Test Tool☆309Sep 13, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Incident Response & Digital Forensics Debugging Extension☆400Dec 11, 2018Updated 7 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- Windows Thingies in Python for live use.☆24Apr 22, 2019Updated 7 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Lazy Office Analyzer☆122Feb 15, 2017Updated 9 years ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago