Python bindings for https://github.com/omerbenamram/evtx/
☆56Jun 13, 2026Updated last month
Alternatives and similar repositories for pyevtx-rs
Users that are interested in pyevtx-rs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parsers for common structures across windows formats.☆12Aug 23, 2023Updated 2 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆939Jun 13, 2026Updated last month
- Python bindings for https://github.com/omerbenamram/mft☆25Dec 23, 2025Updated 7 months ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- A document tagging library☆36May 2, 2026Updated 2 months ago
- Python library for parsing AccessData AD1 images☆35Jun 1, 2023Updated 3 years ago
- A parser for the MFT (Master File Table) format☆161Jan 3, 2026Updated 6 months ago
- Scan codebases for AI SDK usage and map compliance risks to NIST AI RMF, ISO 42001, and EU AI Act☆22Updated this week
- lnk_parser is a full rust implementation to parse windows LNK files☆23Feb 17, 2026Updated 5 months ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- Manage Your Large Team of Consultants☆12Sep 18, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Regipy is an os independent python library for parsing offline registry hives☆278Updated this week
- Safe Rust API to libesedb☆11Sep 10, 2025Updated 10 months ago
- ☆33Feb 26, 2022Updated 4 years ago
- Aralez is a triage tool for Windows and Linux that automates the collection of system information, network/process data, and files.☆24May 5, 2026Updated 2 months ago
- A Windows registry file parser written in Rust☆40Oct 30, 2025Updated 8 months ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆118Jan 26, 2022Updated 4 years ago
- Automatically exported from code.google.com/p/mac-osx-forensics☆28Jan 12, 2016Updated 10 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- NTFS file system specimens☆13May 21, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A modern Python-3-based alternative to RegRipper☆216May 12, 2026Updated 2 months ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆80Jan 9, 2024Updated 2 years ago
- A small helper library for working with python file-like objects with rust.☆50Jun 30, 2026Updated 3 weeks ago
- A tool to convert Windows evtx files (Windows Event Log Files) into JSON format and log to Splunk (optional) using HTTP Event Collector.☆58Apr 8, 2022Updated 4 years ago
- An NTFS/FAT parser for digital forensics & incident response☆237Oct 31, 2025Updated 8 months ago
- NTFS samples☆28Aug 1, 2020Updated 5 years ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- High-level Threat Intelligence playbooks☆21Mar 6, 2021Updated 5 years ago
- Windows Thingies... but in Rust☆23Nov 12, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆43Sep 21, 2023Updated 2 years ago
- Assorted classes and methods for indexing reports and retrieving information from an elastic index☆21Jul 5, 2016Updated 10 years ago
- Tool for analysis of Windows Prefetch files☆26Nov 11, 2018Updated 7 years ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆95Sep 7, 2023Updated 2 years ago
- Windows eventlog formatting, live fetching and querying utility in C☆21May 26, 2020Updated 6 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Feb 13, 2025Updated last year