2 مستودعات
Reading data directly from a storage device by bypassing the operating system's filesystem APIs.
Distinct from Master File Table Parsing: While MFT parsing focuses on the metadata table, this covers the general ability to parse the raw device to find hidden files and alternate data streams.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Raw Filesystem Parsing. Refine with filters or upvote what's useful.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Velociraptor accesses files by parsing the raw device to reveal hidden files and alternate data streams.
Limine is a multiprotocol operating system bootloader that bridges low-level hardware initialization and system software across legacy BIOS and modern UEFI firmware environments. It executes directly on bare-metal hardware without an underlying operating system kernel or standard C library, parsing storage media and filesystems during the early boot sequence before OS drivers load. The software targets diverse processor architectures including x86, ARM, RISC-V, and LoongArch through discrete target binaries built from shared source code. It reads files directly from FAT and ISO9660 storage f
Reads files directly from FAT and ISO9660 storage formats during the early boot sequence.