Alternatives and similar repositories for RegistryToolbox

Users that are interested in RegistryToolbox are comparing it to the libraries listed below

• kacos2000 / MFT_Record_Viewer
  $MFT Record Viewer
  ☆23Updated 3 years ago
• adoxa / regdump
  Dump Windows registry hives as text.
  ☆16Updated 6 years ago
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆35Updated 4 years ago
• microsoft / SysmonCommon
  The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
  ☆65Updated 10 months ago
• kacos2000 / Jumplist-Browser
  Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
  ☆39Updated last year
• EricZimmerman / Lnk
  Lnk file parser
  ☆90Updated 6 months ago
• EricZimmerman / OleCf
  Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does…
  ☆19Updated 10 months ago
• zodiacon / TaskSched
  ☆29Updated 3 years ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆38Updated 2 years ago
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆44Updated 6 months ago
• Wack0 / IFPSTools.NET
  Tools for creating, modifying, assembling and disassembling RemObjects PascalScript files.
  ☆49Updated 2 months ago
• themeldingwars / Be.HexEditor
  A modified fork of Be.HexEditor for use in debug tools
  ☆15Updated 3 years ago
• mrexodia / FunUtils
  Just some fun utilities I wrote for productivity reasons.
  ☆30Updated 2 years ago
• EricZimmerman / SDB
  Parse Microsoft shim databases
  ☆31Updated 11 months ago
• skydive241 / Regshot-Advanced
  This is a fork of Regshot (original found at https://sourceforge.net/projects/regshot/) with very enhanced functionality.
  ☆86Updated 4 years ago
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆49Updated last month
• riverar / regionpolicyevaluator-skeleton
  A skeleton WinRT component that can serve as a substitute for the Region Policy Evaluator in Windows.
  ☆12Updated 2 years ago
• williballenthin / wevt_template
  extract and parse WEVT_TEMPLATEs from PE files
  ☆18Updated last year
• NoMoreFood / Repacls
  Windows File Security Utility (replacement for xcacls, icacls, setacl, and subinacl)
  ☆58Updated 2 weeks ago
• EricZimmerman / ExtensionBlocks
  Extension blocks as found in ShellBags and other places in the Registry
  ☆25Updated 11 months ago
• NoMoreFood / WinPriv
  WinPriv is a utility that can enable privileges and virtually alter registry settings within a target process, amongst other things.
  ☆59Updated last week
• reverseame / windows-memory-extractor
  Tool to extract contents from the memory of Windows systems.
  ☆14Updated 2 years ago
• nasbench / procmon-malware-analysis-filters
  Repository containing malware analysis filters for the Windows SysInternals' - Process Monitor tool
  ☆19Updated 5 years ago
• zodiacon / WMIExplorer
  ☆26Updated 4 months ago
• AndrewRathbun / DirectoryOpus-DFIRConfig
  A config file that's curated for DFIR examiners with shortcuts to common Windows artifacts and settings enabled that help make your life …
  ☆39Updated 11 months ago
• OSRDrivers / tunnel
  Demonstrate the behavior of the tunnel cache on Windows
  ☆10Updated 6 years ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• tenox7 / regln
  Windows Rregistry Linking Utility
  ☆50Updated 4 years ago
• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆29Updated last year
• EricZimmerman / RegistryPlugins
  ☆71Updated 3 months ago