Hivex is a Windows Registry hive extraction library that allows users to read and write Windows Registry 'hive' binary files. It provides a C API and can export the hive as XML. The library is written in C and has bindings for OCaml, Perl, Python, and Ruby. It is licensed under LGPL v2.1. Hivex is a self-contained library that does not use the textual .REG format for output. Instead, it provides a C API and a separate program to export the hive as XML. The library is derived from several sources, including NTREG registry reader/writer library and dumphive, a BSD-licensed Pascal program. Hivex is designed to be more careful about handling error cases, corrupt and malicious registry files, and endianness compared to other libraries.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.
A command-line tool for creating hex dumps, converting between binary and human-readable representations, and patching binary files.
A library to access and read QEMU Copy-On-Write (QCOW) image file formats with support for zlib compression and AES-CBC encryption.
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.
A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.
A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.
Zenduty's platform provides real-time operational health monitoring and incident response orchestration to improve incident response times and build a solid on-call culture.
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.