Alternatives and similar repositories for wevt_template:

Users that are interested in wevt_template are comparing it to the libraries listed below

• EricZimmerman / SDB
  Parse Microsoft shim databases
  ☆30Updated 3 months ago
• EricZimmerman / ExtensionBlocks
  Extension blocks as found in ShellBags and other places in the Registry
  ☆24Updated 3 months ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• forensicmatt / libtsk-rs
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆11Updated 2 years ago
• EricZimmerman / OleCf
  Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does…
  ☆18Updated 2 months ago
• zodiacon / pstools-rust
  ☆12Updated 4 years ago
• ignacioj / mftf
  $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility
  ☆36Updated 8 months ago
• EricZimmerman / Issues
  This is a repository for reporting any issues in any of my software
  ☆12Updated 6 years ago
• EricZimmerman / RegistryPlugins
  ☆65Updated last month
• forensicmatt / RustyUsn
  USN to JSON
  ☆22Updated 5 years ago
• themeldingwars / Be.HexEditor
  A modified fork of Be.HexEditor for use in debug tools
  ☆16Updated 3 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆60Updated 7 months ago
• g-les / floss2yar
  ☆15Updated 2 years ago
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆45Updated last year
• jp-slackspace / x-tension-c-sharp
  An updated C# port of X-Ways X-Tensions API.
  ☆12Updated 7 years ago
• msuhanov / regf-samples
  Windows registry samples
  ☆23Updated 6 years ago
• GDATASoftwareAG / TypeRefHasher
  CLI tool to compute the TypeRefHash for .NET binaries.
  ☆19Updated 3 years ago
• msuhanov / winmem_decompress
  Extract compressed memory pages from page-aligned data
  ☆44Updated 6 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆31Updated 4 years ago
• deroko / activationcontext
  ☆14Updated 7 years ago
• assarbad / msvc-undoc
  Undocumented MSVC
  ☆18Updated 8 months ago
• DidierStevens / AnalyzePESig
  ☆16Updated last year
• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆26Updated last year
• zodiacon / TaskSched
  ☆28Updated 2 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆52Updated 2 years ago
• zodiacon / DeviceExplorer
  ☆46Updated 4 months ago
• woanware / etw-event-dumper
  ☆33Updated 3 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• kacos2000 / Jumplist-Browser
  Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
  ☆32Updated last year