sunsetkookaburra / rust-libesedbLinks
Safe Rust API to libesedb
☆11Updated 4 months ago
Alternatives and similar repositories for rust-libesedb
Users that are interested in rust-libesedb are comparing it to the libraries listed below
Sorting:
- Wrapper for TSK (Sleuth Kit) Bindings☆12Updated 3 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆22Updated 5 months ago
- Keep it secret, keep it safe☆80Updated 11 months ago
- A document tagging library☆32Updated 9 months ago
- Parsers for common structures across windows formats.☆12Updated 2 years ago
- Extension blocks as found in ShellBags and other places in the Registry☆25Updated last year
- Manage Your Large Team of Consultants☆11Updated 3 months ago
- ☆16Updated 2 years ago
- Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…☆43Updated last year
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆50Updated 2 months ago
- Indicators of Normality☆11Updated 3 years ago
- a tiny program to consume from ETW providers for research☆53Updated last year
- Repo containing my public talks☆23Updated 2 years ago
- Windows eventlog formatting, live fetching and querying utility in C☆20Updated 5 years ago
- Windows Event Log Knowledge Base☆29Updated 2 weeks ago
- A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, E…☆22Updated last month
- ☆60Updated last year
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆62Updated last year
- Windows Security Descriptor Definition Language (SDDL) parser and formatter☆18Updated 5 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24Updated 2 years ago
- Timestomper and Timestamp checker with nanosecond accuracy for NTFS volumes☆52Updated 4 years ago
- Forensic framework to build tools that can be reused in multiple projects without changing anything☆31Updated 2 months ago
- Windows Thingies... but in Rust☆23Updated 3 years ago
- A parser for the MFT (Master File Table) format☆155Updated last week
- quASAR: ASAR manipulation made easy☆38Updated 3 years ago
- Command line utility for copying files on NTFS using low level disk access☆39Updated last year
- MFT parser☆74Updated 11 months ago
- A rust based DLL injection project☆31Updated 3 years ago
- ☆20Updated 3 years ago
- ☆18Updated last year