dissect.etl
ETL parser
A parser for Event Trace Log files used by the Windows operating system to log kernel events.
A Dissect module implementing a parser for Event Trace Log (ETL) files, used by the Windows operating system to log kernel events.
2 stars
12 watching
1 forks
Language: Python
last commit: about 2 years agoRelated projects:
| Repository | Description | Stars |
|---|---|---|
| fox-it/dissect.eventlog | Provides parsers for parsing Windows log file formats | 6 |
| fox-it/dissect.executable | A Python module providing parsers for various executable formats like PE, ELF, and Macho-O. | 0 |
| fox-it/dissect.xfs | A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions. | 2 |
| fox-it/dissect.archive | Parses various archive and backup formats using Python | 0 |
| fox-it/dissect.ole | A parser for the Object Linking & Embedding (OLE) format used by Windows document editors. | 3 |
| fox-it/dissect.thumbcache | A Dissect module implementing a parser for the Windows thumbcache data format used by Windows Vista+ systems. | 1 |
| fox-it/dissect.fat | A Dissect module implementing parsers for FAT and exFAT file systems. | 2 |
| fox-it/dissect.volume | A parser module for various disk volume and partition systems | 3 |
| fox-it/dissect | A digital forensics framework that provides tools and parsers to analyze forensic artefacts from various disk and file formats. | 939 |
| fox-it/dissect.clfs | A Dissect module implementing a parser for the CLFS file system of Windows | 5 |
| fox-it/dissect.target | Provides a programming API and command line tools to access various data sources inside disk images or file collections. | 48 |
| fox-it/dissect.esedb | A Dissect module implementing a parser for a specific Microsoft database format used in various enterprise systems. | 18 |
| fox-it/dissect.sql | An implementation of the SQLite database file format parser in Python. | 6 |
| fox-it/dissect.shellitem | A Dissect module implementing a parser for Shellitem structures commonly used by Microsoft Windows. | 2 |
| fox-it/dissect.vmfs | A Dissect module parsing VMFS file system structure and layout | 3 |