extract and parse WEVT_TEMPLATEs from PE files
☆18Dec 30, 2023Updated 2 years ago
Alternatives and similar repositories for wevt_template
Users that are interested in wevt_template are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools for macOS Forensic Bootable media☆16May 20, 2020Updated 6 years ago
- DFIR Reference☆11Jul 30, 2026Updated 3 months ago
- A Windows window manager investigation toolbox☆14Mar 17, 2022Updated 4 years ago
- x86 CIL compiler made in C#.☆21Oct 11, 2022Updated 4 years ago
- Module for decompressing aPLib compressed data☆18Aug 25, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Open-source alternative of Discord's desktop_core☆10Dec 29, 2021Updated 4 years ago
- Rust API for Windows' Job Objects☆25Jun 29, 2025Updated last year
- USN to JSON☆22Apr 4, 2020Updated 6 years ago
- Python bindings for LZFSE☆18Jul 9, 2020Updated 6 years ago
- 010 template for apfs☆27Feb 26, 2021Updated 5 years ago
- High performance reverse proxy for logging LLM traces (OpenRouter/LiteLLM)☆21Sep 8, 2026Updated last month
- QuuBee — PC-98 フリーソフトのブラウザプレイヤー (著作権クリーン: NEC BIOS/MS-DOS 不使用)☆15Oct 9, 2026Updated 3 weeks ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- Proof of Concept Regedit like application for the Universal Windows Platform☆33Oct 9, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Reverse engineering undocumented Windows UI library dui70.dll.☆57Oct 22, 2026Updated last week
- Backstage Parser☆33Jun 23, 2022Updated 4 years ago
- Collection of Windows Composition API Experiments☆14Sep 1, 2025Updated last year
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆43Sep 21, 2023Updated 3 years ago
- My try at reverse engineering the binary resource format used by the Ribbon Framework (UIRibbon.dll)☆13Jul 10, 2023Updated 3 years ago
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- Undocumented MSVC☆49Nov 10, 2025Updated 11 months ago
- Information about the open-source-dfir slack community☆29Jun 17, 2023Updated 3 years ago
- Tools for assisting the reverse engineering of Qakbot☆11Jul 21, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A parser for Unified logging tracev3 files☆106Jul 25, 2025Updated last year
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆120Jan 26, 2022Updated 4 years ago
- A Windows registry file parser written in Rust☆43Oct 30, 2025Updated last year
- Visualization of interaction between entities☆17Nov 28, 2016Updated 9 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Dump content of PDB files (program databases) in JSON, XML, SQLite3, CSV etc.☆51Oct 21, 2021Updated 5 years ago
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆18Mar 25, 2021Updated 5 years ago
- Tool for analysis of Windows Prefetch files☆26Nov 11, 2018Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆24Mar 12, 2025Updated last year
- Debugger and analyzer for ARM ELF executables.☆18Oct 24, 2022Updated 4 years ago
- NTFS file system specimens☆13May 21, 2026Updated 5 months ago
- The ultimate DirectUI tool☆40Sep 1, 2025Updated last year
- Recover event log entries from an image by heurisitically looking for record structures.☆26Oct 9, 2015Updated 11 years ago
- Integration of Microsoft Warbird with the MSVC compiler☆137Jul 16, 2023Updated 3 years ago
- Access the registry from WinRT☆24Mar 3, 2023Updated 3 years ago