EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Humane API for storing and accessing persistent data in IDA Pro databases
Fetch and set configuration values in IDA Pro IDAPython scripts
Pure Python parser for Windows WMI CIM respository databases.
Pure Python parser for classic Windows event log files (.evt).
Pure Python parser for recent Windows event log files (.evtx).
Open source Python library for NTFS analysis
PyQt5 hex viewer widget.
PyQt5 vstruct hex viewer widget.
Cross-platform read access to Windows Registry files.
Unofficial packaged vivisect vstruct mirror.
Utilities for binary analysis using vivisect.
