Jan Starke's Projects
Puts a writable layer of bytes over some byte stream
parses an $MFT file to bodyfile
Rust crate for accessing keys, values, and data stored in Windows hive (registry) files.
Windows registry parser library build upon BinRead
This aims to be a collection of tools to forensically analyze Active Directory databases
PBC (Pairing based cryptography) implementation using Rust
Exporter for Windows Registry Policy Files
compresses all process binaries into a zip file
Collection of command line tools to correlate windows event logs. This set of tools is aimed to be used at forensic investigations.
List contents of Windows Registry files
Offline-viewer for registry files
API Documentation
Safe Rust API to libesedb
The Sleuth Kitยฎ (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Parses Windows $UsnJrnl files
CLI tool to convert XML into JSON