Pure Python parser for classic Windows Event Log files (.evt)
☆52Jun 30, 2023Updated 3 years ago
Alternatives and similar repositories for python-evt
Users that are interested in python-evt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A short and small memory forensics helper.☆52Oct 18, 2017Updated 8 years ago
- Windows Live Artifacts Acquisition Script☆192Jun 20, 2022Updated 4 years ago
- Pure Python parser for Windows Registry hives.☆447Jan 27, 2025Updated last year
- Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…☆49May 31, 2017Updated 9 years ago
- Pure Python parser for Windows Event Log files (.evtx)☆773Mar 19, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Recover event log entries from an image by heurisitically looking for record structures.☆26Oct 9, 2015Updated 10 years ago
- Pythonic interface to the Internet Storm Center / DShield API.☆28May 23, 2023Updated 3 years ago
- Open source Python library for NTFS analysis☆86Dec 22, 2017Updated 8 years ago
- Fix acquired .evt - Windows Event Log files (Forensics)☆18Mar 29, 2016Updated 10 years ago
- A Python library to interface with a cuckoo-modified instance☆23Oct 31, 2016Updated 9 years ago
- Today Plugin (x64) - A Plugin For x64dbg☆13Jul 17, 2018Updated 8 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆211Mar 12, 2025Updated last year
- USBHelperDecryptor is a tool that allows you to encrypt and decrypt data files used by Wii U USB Helper.☆10May 24, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Resolve URL or refering site based on alert or http log match in eve log output from suricata submit to Cuckoo as url task☆18Nov 7, 2016Updated 9 years ago
- Yet Another Repetitive Rootkit☆10Jun 11, 2013Updated 13 years ago
- Cross-platform, open-source shellbag parser☆161Jan 31, 2023Updated 3 years ago
- Sublime Malware Research Tool☆66Oct 28, 2024Updated last year
- Web based code browser using clang to provide basic code analysis.☆47Jul 20, 2017Updated 9 years ago
- Windows Malware Probe of Concept☆22Jun 20, 2022Updated 4 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Jul 13, 2018Updated 8 years ago
- ForensicArtifacts.com Artifact Repository☆12May 16, 2026Updated 2 months ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆110Jan 26, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A warehouse for your malware☆137Nov 21, 2025Updated 7 months ago
- Cryptographic Dataset Generation & Modelling Framework☆41Apr 8, 2020Updated 6 years ago
- Miscellaneous Scripts☆17Sep 11, 2020Updated 5 years ago
- Script for generating Bro intel files from pdf or html reports☆76Dec 7, 2015Updated 10 years ago
- finals-2014☆20Nov 15, 2016Updated 9 years ago
- Lite version of PDF X-RAY that uses no backend☆38Nov 11, 2011Updated 14 years ago
- ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…☆71Mar 9, 2015Updated 11 years ago
- linux c++, fox-toolkit, multi-threaded forensic gui tool☆49Jul 19, 2024Updated 2 years ago
- it's a simple LKM rootkit.☆12Aug 2, 2016Updated 9 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ssdeep based clustering tool☆14Jan 17, 2016Updated 10 years ago
- Process injection via KernelCallbackTable☆13Jan 28, 2022Updated 4 years ago
- File system forensics☆18Updated this week
- Python Module for creating Log Event Extended Format events for IBM QRadar☆12Jun 4, 2016Updated 10 years ago
- Scripts I have made for blue team☆16Apr 1, 2018Updated 8 years ago
- VolDiff: Malware Memory Footprint Analysis based on Volatility☆195Sep 12, 2017Updated 8 years ago
- Quick Irssi script that redirects mentions and PMs to Pushbullet☆11Oct 16, 2016Updated 9 years ago