LfLe
Log Reconstructor
Recover event log entries from an image by identifying record structures.
Recover event log entries from an image by heurisitically looking for record structures.
27 stars
10 watching
13 forks
Language: Python
last commit: about 9 years ago
Linked from 1 awesome list
shadawck/awesome-anti-forensicRelated projects:
| Repository | Description | Stars |
|---|---|---|
| williballenthin/evtxtract | Reconstructs fragments of event log data from raw binary files, including unallocated space and memory images. | 191 |
| williballenthin/process-forest | Tools for reconstructing historical process hierarchies from Windows event logs. | 146 |
| williballenthin/python-evt | A Python module for parsing classic Windows Event Log files (.evt) | 49 |
| williballenthin/python-evtx | A Python module for parsing Windows Event Log files (.evtx) into structured data | 732 |
 fx5/not_random | Reconstructs the internal state of a Mersenne Twister algorithm from partial output data | 71 |
| williballenthin/shellbags | This tool helps reconstruct user activities by parsing Windows Registry data. | 151 |
 flair-thu/pairedlogitsinversion | A Python implementation of an image recovery attack using paired-logits inversion | 4 |
 golnazghiasi/lrr | Code and models for reconstructing and refining images in semantic segmentation using Laplacian Pyramid techniques. | 59 |
| williballenthin/python-ntfs | A Python library for analyzing and working with NTFS file systems. | 81 |
 yarox24/evtkit | Tool to repair Windows Event Log files (.evt) acquired during forensic investigations | 18 |
 andreoliwa/logseq-doctor | Tool to convert and enhance Markdown files using Python | 47 |
 buaa-cst/ilrg | Recovery method for Federated Learning datasets using gradients to estimate instance-wise batch label restoration | 5 |
 fox-it/dissect.eventlog | Provides parsers for parsing Windows log file formats | 6 |
 resibots/chatzilygeroudis_2018_rte | Research on an algorithm to learn how robots recover from damage in simulations and real-world environments | 10 |
 tommilligan/flake8-fixme | Automatically detects and flags temporary notes in Python code to help maintain coding standards. | 18 |