libfwnt Logo

libfwnt

0
Free
Visit Website

libfwnt is a library for Windows NT data types, providing a set of functions to work with Windows NT data structures. It is licensed under LGPLv3+ and is currently in alpha status. The library provides a way to access and manipulate Windows NT data types, making it a useful tool for developers and researchers working with Windows systems. The project provides detailed documentation and guides on how to build from source, making it easy to get started with the library.

FEATURES

ALTERNATIVES

A reconnaissance tool for GitHub organizations

A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.

Automated tool for parsing Windows registry hives and extracting valuable information for forensic analysis.

A forensic analysis tool that extracts and parses logs, notifications, and system information from iOS/iPadOS devices and backups.

A cross-platform registry hive editor for forensic analysis with advanced features like hex viewer and reporting engine.

A Python-based engine for automatic creation of timelines in digital forensic analysis

A collection of PowerShell modules for artifact gathering and reconnaissance of Windows-based endpoints.

A tool for fixing acquired .evt Windows Event Log files in digital forensics.