janstarke Goto Github PK

benford

library to test the Benford-ness of a given set of numbers

bodyfile

Parser and Generator for the famous `mactime` bodyfile format

bodyfile-paper

Improving the bodyfile format

buf_stream_reader

provides a buffered access to a Read object with a limited Seek implementation.

cargo-deb-amd64-ubuntu

Action for creating statically-linked .deb package for Rust projects using cargo deb

clap-markdown-dfir

Autogenerate Markdown documentation for clap command-line tools (forked from ConnorGray/clap-markdown)

cryptopals

csvlens

Command line csv viewer

dfir-esedb

A library to allow forensic analysis of EseDB files

dfir-timeline

Library for the creation of DFIR timelines

dissect.target

The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

ecs_types

Rust types mapping to the elasticsearch common schema

es4forensics

⛔️ DEPRECATED: Use https://github.com/dfir-dd/dfir-toolkit instead

evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

evtx-message-dump

Dump all Windows event log messages

evtx2bodyfile

Parses a lot of evtx files and prints a bodyfile

evtxgrep

filtering Windows Event Log files

evtxtools

⛔️ DEPRECATED: Use https://github.com/dfir-dd/dfir-toolkit instead

evtxview

evtxview is a GUI viewer for Microsoft Windows evtx files (Windows event logs). I'm hacking this tiny tool because I need such a tool in most forensic investigations.

flow.record

Recordization library

forensic-scripts

Collection of useful forensic scripts

ipgrep

search for IP addresses in text files

janstarke

janstarke.github.io

kb

Personal Knowledge Base

libe2ee

C++-based library that implements Proxy-ReEncryption (AFGH-Scheme) and provides exporting and importing of JSON datastructure

libesedb

Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.

liblnk

Library and tools to access the Windows Shortcut File (LNK) format

libpefile

library to parse PE files

lnk-rs

A Rust library for parsing and writing MS Shell Links (shortcuts, *.lnk)