Alternatives and similar repositories for zff-rs

Users that are interested in zff-rs are comparing it to the libraries listed below

• kacos2000 / MFT_Record_Viewer

  View on GitHub
  $MFT Record Viewer
  ☆23Nov 9, 2022Updated 3 years ago
• forensicmatt / libtsk-rs

  View on GitHub
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆12Jan 10, 2023Updated 3 years ago
• obsidianforensics / scripts

  View on GitHub
  Small scripts and POCs related to digital forensics
  ☆18Nov 1, 2022Updated 3 years ago
• pcbje / pyad1

  View on GitHub
  Python library for parsing AccessData AD1 images
  ☆33Jun 1, 2023Updated 2 years ago
• williballenthin / wevt_template

  View on GitHub
  extract and parse WEVT_TEMPLATEs from PE files
  ☆18Dec 30, 2023Updated 2 years ago
• moaistory / IE10Analyzer

  View on GitHub
  http://moaistory.blogspot.com/2016/08/ie10analyzer.html
  ☆19Jul 20, 2024Updated last year
• forensicmatt / PancakeViewer

  View on GitHub
  A DFVFS Backed Forensic Viewer
  ☆42Apr 13, 2020Updated 5 years ago
• pjrinaldi / wombatforensics

  View on GitHub
  linux c++, fox-toolkit, multi-threaded forensic gui tool
  ☆49Jul 19, 2024Updated last year
• williballenthin / LfLe

  View on GitHub
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆26Oct 9, 2015Updated 10 years ago
• Cainor / Calendarinho

  View on GitHub
  Manage Your Large Team of Consultants
  ☆11Sep 18, 2025Updated 4 months ago
• vobst / btf2json

  View on GitHub
  Generate Volatility3 profiles from BTF.
  ☆31Dec 21, 2024Updated last year
• eopdyke / USB-Device-History

  View on GitHub
  Discover USB device history for a specific user
  ☆23Dec 28, 2015Updated 10 years ago
• vivesg / RegistryToolbox

  View on GitHub
  Windows Registry binary files comparison Tool.
  ☆26Nov 26, 2025Updated 2 months ago
• nrvana / macOS-triage

  View on GitHub
  macOS triage is a python script to collect various macOS logs, artifacts, and other data.
  ☆25Mar 25, 2021Updated 4 years ago
• devgc / ElasticHandler

  View on GitHub
  Assorted classes and methods for indexing reports and retrieving information from an elastic index
  ☆21Jul 5, 2016Updated 9 years ago
• Silv3rHorn / ArtifactExtractor

  View on GitHub
  Extract common Windows artifacts from source images and VSCs
  ☆64May 10, 2021Updated 4 years ago
• Invoke-IR / PowerForensicsPortable

  View on GitHub
  ☆33Nov 21, 2024Updated last year
• jjarava / mac-osx-forensics

  View on GitHub
  Automatically exported from code.google.com/p/mac-osx-forensics
  ☆28Jan 12, 2016Updated 10 years ago
• lfcnassif / MultiContentViewer

  View on GitHub
  DataContentViewer module for Autopsy 3.1 to preview dozens of file types
  ☆30Oct 28, 2020Updated 5 years ago
• Digital-Forensics-Discord-Server / DFIRGlossary

  View on GitHub
  A collaboration effort by the DFIR community to provide definitions (sometimes multiple) for common forensic terms!
  ☆26Dec 1, 2022Updated 3 years ago
• CdtDelta / YOP

  View on GitHub
  My Year of Python Repository
  ☆28Jun 13, 2020Updated 5 years ago
• microsoft / SCXcore

  View on GitHub
  System Center Cross Platform Provider for Operations Manager
  ☆39Apr 29, 2025Updated 9 months ago
• py4n6 / pyflag

  View on GitHub
  Python Forensic and Log Analysis GUI
  ☆27Dec 22, 2014Updated 11 years ago
• PacktPublishing / Django-with-Data-Science

  View on GitHub
  Django with Data Science [Video], published by Packt
  ☆12Dec 15, 2025Updated last month
• alpine-sec / SPECTR3

  View on GitHub
  Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
  ☆44Oct 25, 2024Updated last year
• ArsenalRecon / BackstageParser

  View on GitHub
  Backstage Parser
  ☆33Jun 23, 2022Updated 3 years ago
• kacos2000 / Win10LiveInfo

  View on GitHub
  Windows 10 Live Information viewer
  ☆37Jan 27, 2022Updated 4 years ago
• advanced-threat-research / DarkSide-Config-Extract

  View on GitHub
  ☆35Oct 29, 2021Updated 4 years ago
• ignacioj / mftf

  View on GitHub
  $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility
  ☆38Jul 18, 2024Updated last year
• kevthehermit / volatility_symbols

  View on GitHub
  Volatility Symbol Generator for Linux Kernels
  ☆37Nov 15, 2023Updated 2 years ago
• digitalsleuth / WIN-FOR

  View on GitHub
  Windows Forensics Environment Builder
  ☆179Dec 5, 2025Updated 2 months ago
• fit-project / fit

  View on GitHub
  FIT is a modular suite of Python applications for digital forensic acquisition of online contents such as web pages, emails, social media…
  ☆93Oct 27, 2025Updated 3 months ago
• slaughterjames / excelpeek

  View on GitHub
  ☆38Jan 3, 2022Updated 4 years ago
• AlmCo / Panorama

  View on GitHub
  Fast incident overview
  ☆41Feb 11, 2017Updated 9 years ago
• JPCERTCC / Windows-Symbol-Tables

  View on GitHub
  Windows symbol tables for Volatility 3
  ☆92Jul 11, 2024Updated last year
• willstruggle / john

  View on GitHub
  John the Ripper 1.8.0.13-jumbo-1-bleeding-0abfc74 2018-05-15 0832
  ☆10May 17, 2018Updated 7 years ago
• grayfold3d / POSH-Triage

  View on GitHub
  Tools for parsing Forensic images
  ☆41Dec 14, 2018Updated 7 years ago
• adamkramer / reg_export

  View on GitHub
  ☆11Dec 14, 2016Updated 9 years ago
• acalarch / ETL-to-EVTX

  View on GitHub
  Powershell to read ETL file on an interval and convert it to an EVTX (so Windows Event Forwarding can 'subscribe')
  ☆11May 16, 2017Updated 8 years ago