Alternatives and similar repositories for rust-libesedb:

Users that are interested in rust-libesedb are comparing it to the libraries listed below

• forensicmatt / libtsk-rs
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆11Updated 2 years ago
• Cainor / Calendarinho
  Manage Your Large Team of Consultants
  ☆11Updated last month
• EricZimmerman / ExtensionBlocks
  Extension blocks as found in ShellBags and other places in the Registry
  ☆24Updated 2 months ago
• WithSecureLabs / tau-engine
  A document tagging library
  ☆29Updated last week
• AbdulRhmanAlfaifi / lnk_parser
  lnk_parser is a full rust implementation to parse windows LNK files
  ☆17Updated 2 months ago
• omerbenamram / mft
  A parser for the MFT (Master File Table) format
  ☆136Updated last year
• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆26Updated last year
• mtth-bfft / evtq
  Windows eventlog formatting, live fetching and querying utility in C
  ☆18Updated 4 years ago
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆45Updated last year
• ignacioj / mftf
  $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility
  ☆36Updated 8 months ago
• forensicmatt / RsWindowsThingies
  Windows Thingies... but in Rust
  ☆23Updated 2 years ago
• omerbenamram / winstructs
  Parsers for common structures across windows formats.
  ☆12Updated last year
• EricZimmerman / RegistryExplorerBookmarks
  Registry Explorer bookmark definitions
  ☆41Updated 3 months ago
• strozfriedberg / notatin
  A Windows registry file parser written in Rust
  ☆37Updated last year
• theflakes / fmd
  Windows file metadata / forensic tool.
  ☆18Updated 6 months ago
• EricZimmerman / MFT
  MFT parser
  ☆64Updated last month
• EricZimmerman / RegistryPlugins
  ☆62Updated 3 weeks ago
• EricZimmerman / Lnk
  Lnk file parser
  ☆82Updated last month
• Velocidex / go-ese
  Go implementation of an Extensible Storage Engine parser
  ☆29Updated last month
• EricZimmerman / WxTCmd
  ☆19Updated 2 months ago
• nasbench / procmon-malware-analysis-filters
  Repository containing malware analysis filters for the Windows SysInternals' - Process Monitor tool
  ☆15Updated 4 years ago
• dfir-dd / dionysos
  Scanner for certain IoCs
  ☆11Updated 2 months ago
• EricZimmerman / VSCMount
  Mount VSCs with ease!
  ☆15Updated 2 months ago
• EricZimmerman / RecentFileCacheParser
  Parses RecentFileCacheParser.bcf files
  ☆26Updated last month
• jklepsercyber / defender-detectionhistory-parser
  A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
  ☆113Updated 3 years ago
• williballenthin / wevt_template
  extract and parse WEVT_TEMPLATEs from PE files
  ☆18Updated last year
• EricZimmerman / RECmd
  Command line access to the Registry
  ☆138Updated 2 months ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆63Updated last year
• ForensicRS / forensic-rs
  Forensic framework to build tools that can be reused in multiple projects without changing anything
  ☆26Updated 3 weeks ago
• fox-it / dissect.target
  The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…
  ☆54Updated last week