Alternatives and similar repositories for ntfsdump

Users that are interested in ntfsdump are comparing it to the libraries listed below

• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆26Updated last year
• libyal / winevt-kb
  Windows Event Log Knowledge Base
  ☆25Updated 8 months ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆32Updated 5 years ago
• JPCERTCC / etw-scan
  ETW forensic tool for Volatility3 plugin
  ☆15Updated 7 months ago
• libyal / libfwevt
  Library for Windows XML Event Log (EVTX) data types
  ☆18Updated 9 months ago
• connormcgarr / Presentations
  ☆28Updated 7 months ago
• joxeankoret / deeptoad
  DeepToad is a library and a tool to clusterize similar files using fuzzy hashing
  ☆20Updated 5 years ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆16Updated last year
• sumeshi / mft2es
  A library for fast parse & import of Windows Master File Table($MFT) into Elasticsearch.
  ☆11Updated this week
• DissectMalware / xlrd2
  xlrd2 is a variant of xlrd that is actively maintained
  ☆23Updated 10 months ago
• DissectMalware / yaradbg-backend
  ☆25Updated last year
• mandiant / win10_auto
  ☆24Updated 5 years ago
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆18Updated 3 years ago
• tokesr / usb_investigator
  ☆9Updated 5 years ago
• herosi / triage-collector
  ☆22Updated 8 months ago
• hasherezade / tag_converter
  ☆22Updated 4 years ago
• proferosec / HelloKittyUnpacker
  A tool to assist in analysis of packed HelloKitty ransomware binaries
  ☆11Updated 3 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 5 years ago
• ohjeongwook / WindowsEventTools
  Collection Of Scripts And Utilities For Windows Event Hunting
  ☆18Updated 5 years ago
• SafeBreach-Labs / CoWTools
  Tools for analyzing Windows containers and break container's isolation
  ☆31Updated 2 years ago
• williballenthin / viv-utils
  Utilities for working with vivisect
  ☆25Updated 3 months ago
• yardenshafir / conference_talks
  Slides from various conference talks
  ☆37Updated 2 years ago
• mandiant / vbScript_deobfuscator
  Help deobfuscate VBScript
  ☆15Updated 2 years ago
• ufrisk / MemProcFS-plugins
  ☆57Updated 8 months ago
• gkucherin / de4dot
  .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).
  ☆29Updated 3 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆55Updated 2 years ago
• analyzeDFIR / analyzePF
  Tool for analysis of Windows Prefetch files
  ☆26Updated 6 years ago
• michaeljgoodman / Dumpulator-IDA
  Currently proof-of-concept
  ☆17Updated 3 years ago
• 0xHasanM / Autopsy-Registry-Explorer
  Autopsy Module to analyze Registry Hives
  ☆15Updated 3 years ago
• avast / authenticode-parser
  Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.
  ☆18Updated last year