INDXParse

NTFS parser

A tool suite for parsing NTFS artifacts and extracting information from INDX files.

Tool suite for inspecting NTFS artifacts.

GitHub

216 stars
21 watching
42 forks
Language: Python
last commit: about 1 year ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
williballenthin/python-ntfs A Python library for analyzing and working with NTFS file systems. 80
fox-it/dissect.ntfs A parser for the NTFS file system used in Windows operating systems 8
williballenthin/python-evtx A Python module for parsing Windows Event Log files (.evtx) into structured data 732
williballenthin/shellbags This tool helps reconstruct user activities by parsing Windows Registry data. 149
nxparser/nxparser A Java-based parser for RDF serializations and other formats 20
thewhiteninja/ntfstool A forensic tool for analyzing NTFS volumes and decrypting encrypted files 478
williballenthin/python-evt A Python module for parsing classic Windows Event Log files (.evt) 48
williballenthin/python-idb A library that provides read-only access to internal structures of IDA Pro databases and analyzes logical elements from these structures 458
msuhanov/dfir_ntfs A digital forensics tool for parsing and analyzing NTFS/FAT file systems. 191
dtenny/rexxparse A string parsing tool inspired by the REXX PARSE construct. 11
aarsakian/mftextractor Tool to parse and extract information from NTFS Master File Table (MFT) files. 14
poorbillionaire/usn-journal-parser A Python script to parse the NTFS USN journal and extract metadata changes for forensic analysis. 107
rurik/java_idx_parser Analyzes the structure and content of Java Cache IDX files to extract relevant information about malware origins and infection vectors. 39
willdoescode/nat A command-line tool for displaying file metadata and permissions in a user-friendly format 1,272
seamusabshere/remote_table A Ruby library that reads and parses various file formats, including XLSX, XLS, ODS, CSV, TSV, and Google Docs, returning tabular data as arrays or hashes. 226