Python script to parse the NTFS USN Journal
Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates that should be edited based on the needs of the analyst. Many of these queries will have an accompanying README with a link for more detailed explanations on usage and possible…
Open source Python library for NTFS analysis
Las características principales de williballenthin/python-ntfs son: Windows Artifact Analysis, File System Processing.
Las alternativas de código abierto para williballenthin/python-ntfs incluyen: thewhiteninja/ntfstool — Forensics tool for NTFS (parser, mft, bitlocker, deleted files). poorbillionaire/usn-journal-parser — Python script to parse the NTFS USN Journal. lazza/recuperabit. abrignoni/dfir-sql-query-repo — Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates… forensicartifacts/artifacts — Digital Forensics artifact repository. cgosec/blauhaunt — A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question…
