dionysos | Scanner for various IoCs | ![Crates.io (latest)](https://img.shields.io/crates/dv/dionysos) |
es4forensics | provides structs and functions to insert timeline data into an elasticsearch index | ![Crates.io (latest)](https://img.shields.io/crates/dv/es4forensics) |
evtx2bodyfile | parses evtx files into a bodyfile | ![Crates.io (latest)](https://img.shields.io/crates/dv/evtx2bodyfile) |
evtxtools | Collection of command line tools to correlate windows event logs. This set of tools is aimed to be used at forensic investigations. | ![Crates.io (latest)](https://img.shields.io/crates/dv/evtxtools) |
mactime2 | Replacement for mactime which fixes some of its shortcomings | ![Codecov](https://img.shields.io/codecov/c/github/janstarke/mactime2) |
mft2bodyfile | parses an $MFT file to bodyfile | ![Crate](https://img.shields.io/crates/v/mft2bodyfile.svg) ![Crates.io](https://img.shields.io/crates/d/mft2bodyfile) |
ntdsextract2 | Extraction of forensic artifacts from ntds.dit files | ![Crates.io (latest)](https://img.shields.io/crates/dv/ntdsextract2) |
procbins | Compresses all process binaries into a zip file | ![Crates.io](https://img.shields.io/crates/d/procbins) |
regview | Offline-Viewer for Windows Registry Files | ![Crates.io (latest)](https://img.shields.io/crates/dv/regview) |
rexgen | A tool to create words based on regular expressions | ![GitHub issues](https://img.shields.io/github/issues/janstarke/rexgen) |
| | |
evtxview | evtxview is a GUI viewer for Microsoft Windows evtx files (Windows event logs). I'm hacking this tiny tool because I need such a tool in most forensic investigations. | final, but boring |
libe2ee | C++-based library that implements Proxy-ReEncryption (AFGH-Scheme) and provides exporting and importing of JSON datastructure | PoC, abondened |