libqcow Logo

libqcow

0
Free
Visit Website

libqcow is a library to access the QEMU Copy-On-Write (QCOW) image file format. It supports read-only operations for QCOW versions 1, 2, and 3, with features including zlib (DEFLATE) compression, AES-CBC 128-bit encryption, and backing file (differential image). Currently in alpha status, the library is licensed under LGPLv3+ and has some unsupported features like LUKS encryption, data file, and in-image snapshots. The project is working towards thread-safety in file API functions.

FEATURES

ALTERNATIVES

Open source digital forensics tools for analyzing disk images and recovering files.

Anti-forensics tool for Red Teamers to erase footprints and test incident response capabilities.

Tool for live forensics acquisition on Windows systems, collecting artefacts for early compromise detection.

Python forensic tool for extracting and analyzing information from Firefox, Iceweasel, and Seamonkey browsers.

Orochi is a collaborative forensic memory dump analysis framework.

Dissect is a digital forensics & incident response framework that simplifies the analysis of forensic artefacts from various disk and file formats.

libevt is a library to access and parse Windows Event Log (EVT) files.

Stegextract is a Bash script that extracts hidden files and strings from images, supporting PNG, JPG, and GIF formats.

PINNED