omerbenamram / pyevtx-rs
Python bindings for https://github.com/omerbenamram/evtx/
☆50Updated 2 months ago
Alternatives and similar repositories for pyevtx-rs:
Users that are interested in pyevtx-rs are comparing it to the libraries listed below
- Yet another registry parser☆132Updated 3 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 2 months ago
- Simple yara rule manager☆66Updated 2 years ago
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- Random hunting ordiented yara rules☆95Updated 2 years ago
- A rewrite of mactime, a bodyfile reader☆37Updated 8 months ago
- Various capabilities for static malware analysis.☆77Updated 7 months ago
- A modern Python-3-based alternative to RegRipper☆194Updated 3 weeks ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆104Updated 3 weeks ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆73Updated last year
- Automatic YARA rule generation for Malpedia☆159Updated 2 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41Updated 3 years ago
- A repository that maps API calls to Sysmon Event ID's.☆119Updated 2 years ago
- Community modules for FAME☆65Updated 2 months ago
- YARA rule analyzer to improve rule quality and performance☆99Updated 2 weeks ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆39Updated 2 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆64Updated 2 years ago
- Carves and recreates VSS catalog and store from Windows disk image.☆98Updated 2 years ago
- Carve file metadata from NTFS index ($I30) attributes☆63Updated last year
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆63Updated 2 years ago
- ☆34Updated 6 months ago
- Signature engine for all your logs☆167Updated last year
- Extract compressed memory pages from page-aligned data☆45Updated 6 years ago
- Digital Forensics Artifacts Knowledge Base☆81Updated 11 months ago
- Publicly shareable windows event log message data☆27Updated 5 years ago
- A guide on how to write fast and memory friendly YARA rules☆142Updated 2 months ago
- "Evolving AppCompat/AmCache data analysis beyond grep"☆202Updated 3 years ago
- A Windows registry file parser written in Rust☆37Updated last year
- Automatically create YARA rules from malicious documents.☆211Updated 2 years ago
- Binary commandline executable to parse ETL files☆67Updated 6 years ago