gf4
/
awesome-malware-analysis
mirror of https://git.hackliberty.org/Awesome-Mirrors/awesome-malware-analysis
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add @williballenthin EVTXtract and python libs

pull/1/head
rshipp 2015-05-09 16:35:00 -06:00
parent 14f842b591
commit bce5ea7566
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -216,6 +216,8 @@ the [browser malware](#browser-malware) section.*
* [bulk_extractor](https://github.com/simsong/bulk_extractor) - Fast file
carving tool.
* [EVTXtract](https://github.com/williballenthin/EVTXtract) - Carve Windows
Event Log files from raw binary data.
* [Foremost](http://foremost.sourceforge.net/) - File carving tool designed
by the US Air Force.
* [Hachoir](https://bitbucket.org/haypo/hachoir) - A collection of Python
@ -299,6 +301,10 @@ the [browser malware](#browser-malware) section.*
## Windows Artifacts
* [python-evt](https://github.com/williballenthin/python-evt) - Python
library for parsing Windows Event Logs.
* [python-registry](http://www.williballenthin.com/registry/) - Python
library for parsing registry files.
* [RegRipper](https://regripper.wordpress.com/)
([GitHub](https://github.com/keydet89/RegRipper2.8)) -
Plugin-based registry analysis tool.