ogmini / Notepad-State-LibraryLinks
C# Library and research notes for Windows 11 Notepad State Files
☆27Updated 2 months ago
Alternatives and similar repositories for Notepad-State-Library
Users that are interested in Notepad-State-Library are comparing it to the libraries listed below
Sorting:
- Python script to walk a folder or a zip file for SQLite Databases☆37Updated 2 years ago
- ☆23Updated 10 months ago
- Vault of Windows Registry forensic artifacts☆25Updated last month
- A simple script to read the contents of a zip/tar/folder and extract metadata☆20Updated 3 months ago
- Chrome Logs Events and Protobuf Parser☆39Updated 3 years ago
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆66Updated 2 years ago
- FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV…☆10Updated 2 years ago
- Just Another broken Registry Parser (JARP)☆16Updated last year
- MFT parser☆74Updated 11 months ago
- DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based o…☆87Updated last year
- Carve file metadata from NTFS index ($I30) attributes☆71Updated last year
- USN Journal full path builder☆63Updated last year
- RegRipper4.0☆76Updated last month
- Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache☆19Updated last year
- ☆19Updated last year
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆20Updated last year
- Recycle bin artifact parser☆57Updated 11 months ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆28Updated 8 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆49Updated last year
- A tool for fetching DFIR and other GitHub tools.☆24Updated 5 months ago
- ☆28Updated 2 months ago
- Dump quarantined files from Windows Defender☆73Updated 3 years ago
- ☆56Updated 6 months ago
- Parses USB connection artifacts from offline Registry hives☆105Updated 6 months ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆59Updated 6 months ago
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆127Updated last year
- Contains compiled binaries of Volatility☆36Updated 7 months ago
- macOS Artifacts☆33Updated 10 months ago
- Parser for Sdba memory pool tags☆20Updated 4 years ago
- Quick ESXi Log Parser☆28Updated 2 months ago