Alternatives and similar repositories for rust-libesedb:

Users that are interested in rust-libesedb are comparing it to the libraries listed below

• forensicmatt / libtsk-rs
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆11Updated 2 years ago
• Cainor / Calendarinho
  Manage Your Large Team of Consultants
  ☆11Updated 2 months ago
• AbdulRhmanAlfaifi / lnk_parser
  lnk_parser is a full rust implementation to parse windows LNK files
  ☆18Updated 3 months ago
• strozfriedberg / notatin
  A Windows registry file parser written in Rust
  ☆37Updated last year
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆45Updated 2 years ago
• EricZimmerman / ExtensionBlocks
  Extension blocks as found in ShellBags and other places in the Registry
  ☆24Updated 3 months ago
• omerbenamram / winstructs
  Parsers for common structures across windows formats.
  ☆12Updated last year
• forensicmatt / RsWindowsThingies
  Windows Thingies... but in Rust
  ☆23Updated 2 years ago
• omerbenamram / mft
  A parser for the MFT (Master File Table) format
  ☆138Updated last year
• ignacioj / mftf
  $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility
  ☆36Updated 9 months ago
• dfir-dd / dionysos
  Scanner for certain IoCs
  ☆11Updated 2 months ago
• EricZimmerman / MFT
  MFT parser
  ☆65Updated 2 months ago
• WithSecureLabs / tau-engine
  A document tagging library
  ☆30Updated 3 weeks ago
• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆26Updated last year
• theflakes / fmd
  Windows file metadata / forensic tool.
  ☆18Updated 7 months ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆18Updated 2 years ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆63Updated last year
• EricZimmerman / WxTCmd
  ☆19Updated 2 months ago
• EricZimmerman / RegistryPlugins
  ☆66Updated last month
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆25Updated last week
• williballenthin / wevt_template
  extract and parse WEVT_TEMPLATEs from PE files
  ☆18Updated last year
• jp-slackspace / x-tension-c-sharp
  An updated C# port of X-Ways X-Tensions API.
  ☆12Updated 7 years ago
• k3idii / ION
  Indicators of Normality
  ☆12Updated 2 years ago
• mtth-bfft / evtq
  Windows eventlog formatting, live fetching and querying utility in C
  ☆18Updated 4 years ago
• jklepsercyber / defender-detectionhistory-parser
  A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
  ☆113Updated 3 years ago
• fox-it / dissect.target
  The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…
  ☆57Updated this week
• hasherezade / mal_unpack_py
  Python wrappers for mal_unpack
  ☆36Updated last year
• EricZimmerman / RegistryExplorerBookmarks
  Registry Explorer bookmark definitions
  ☆41Updated 4 months ago
• EricZimmerman / OleCf
  Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does…
  ☆18Updated 2 months ago
• puffyCid / artemis
  A cross platform forensic parser written in Rust!
  ☆80Updated 2 weeks ago