libesedb is a library to access the Extensible Storage Engine (ESE) Database File (EDB) format, used in various applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. The library is still experimental and has planned features like multi-threading support. It also provides documentation and resources for forensic analysis of the Windows Search database and ESE Database File Knowledge Base.
FEATURES
ALTERNATIVES
mac_apt is a versatile DFIR tool for processing Mac and iOS images, offering extensive artifact extraction capabilities and cross-platform support.
A Windows Registry hive extraction library that reads and writes Windows Registry 'hive' binary files.
Modern digital forensics and incident response platform with comprehensive tools.
Digital investigation tool for extracting forensic data from computers and managing investigations.
A software that collects forensic artifacts on systems for forensic investigations.
A simple Golang application for storing NIST National Software Reference Library Reference Data Set (NSRL RDS) with md5 and sha1 hash lookup searches.
An open source digital forensic tool for processing and analyzing digital evidence with high performance and multiplatform support.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.