omerbenamram / pyevtx-rsView external linksLinks
Python bindings for https://github.com/omerbenamram/evtx/
☆55Jan 3, 2026Updated last month
Alternatives and similar repositories for pyevtx-rs
Users that are interested in pyevtx-rs are comparing it to the libraries listed below
Sorting:
- Parsers for common structures across windows formats.☆12Aug 23, 2023Updated 2 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆12Jan 10, 2023Updated 3 years ago
- Python bindings for https://github.com/omerbenamram/mft☆23Dec 23, 2025Updated last month
- A library for fast parse & import of Windows Master File Table($MFT) into Elasticsearch.☆12Jun 23, 2025Updated 7 months ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- A document tagging library☆33Mar 27, 2025Updated 10 months ago
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆880Feb 6, 2026Updated last week
- Python library for parsing AccessData AD1 images☆33Jun 1, 2023Updated 2 years ago
- Safe Rust API to libesedb☆12Sep 10, 2025Updated 5 months ago
- Manage Your Large Team of Consultants☆11Sep 18, 2025Updated 4 months ago
- NTFS file system specimens☆13Jul 3, 2023Updated 2 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆22Jul 12, 2025Updated 7 months ago
- A Windows registry file parser written in Rust☆41Oct 30, 2025Updated 3 months ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 3 years ago
- Automatically exported from code.google.com/p/mac-osx-forensics☆28Jan 12, 2016Updated 10 years ago
- Regipy is an os independent python library for parsing offline registry hives☆266Jan 22, 2026Updated 3 weeks ago
- A parser for the MFT (Master File Table) format☆155Jan 3, 2026Updated last month
- A modern Python-3-based alternative to RegRipper☆205Mar 31, 2025Updated 10 months ago
- ☆33Feb 26, 2022Updated 3 years ago
- High-level Threat Intelligence playbooks☆20Mar 6, 2021Updated 4 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated last year
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆78Jan 9, 2024Updated 2 years ago
- A tool to convert Windows evtx files (Windows Event Log Files) into JSON format and log to Splunk (optional) using HTTP Event Collector.☆58Apr 8, 2022Updated 3 years ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆19Jun 2, 2021Updated 4 years ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆116Jan 26, 2022Updated 4 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 5 years ago
- Python based CLI for MalwareBazaar☆39Jul 22, 2025Updated 6 months ago
- ☆24Mar 12, 2025Updated 11 months ago
- USN to JSON☆22Apr 4, 2020Updated 5 years ago
- Windows Thingies... but in Rust☆23Nov 12, 2022Updated 3 years ago
- An NTFS/FAT parser for digital forensics & incident response☆217Oct 31, 2025Updated 3 months ago
- NTFS samples☆27Aug 1, 2020Updated 5 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 4 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆17Oct 8, 2016Updated 9 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Queries for parsed spotlight database in sqlite☆13Dec 29, 2020Updated 5 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 3 years ago
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago