Reverse Dependencies of dissect.cstruct

The following projects have a declared dependency on dissect.cstruct:

• acquire — A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
• dissect — Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group)
• dissect.archive — A Dissect module implementing parsers for various archive and backup formats
• dissect.btrfs — A Dissect module implementing a parser for the Btrfs file system, a commonly used Linux filesystem.
• dissect.cim — A Dissect module implementing a parser for the Windows Common Information Model (CIM) database, used in the Windows operating system
• dissect.clfs — A Dissect module implementing a parser for the CLFS (Common Log File System) file system of Windows
• dissect.cobaltstrike — a Python library for dissecting Cobalt Strike related data
• dissect.esedb — A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, Exchange and Windows Update
• dissect.etl — A Dissect module implementing a parser for Event Trace Log (ETL) files, used by the Windows operating system to log kernel events
• dissect.eventlog — A Dissect module implementing parsers for the Windows EVT, EVTX and WEVT log file formats
• dissect.evidence — A Dissect module implementing a parsers for various forensic evidence file containers, currently: AD1, ASDF and EWF
• dissect.executable — A Dissect module implementing a parsers for various executable formats such as PE, ELF and Macho-O
• dissect.extfs — A Dissect module implementing a parser for the ExtFS file system, the native filesystem for Linux operating systems
• dissect.fat — A Dissect module implementing parsers for the FAT and exFAT file systems, commonly used on flash memory based storage devices and UEFI partitions
• dissect.ffs — A Dissect module implementing a parser for the FFS file system, commonly used by BSD operating systems
• dissect.hypervisor — A Dissect module implementing parsers for various hypervisor disk, backup and configuration files
• dissect.jffs — A Dissect module implementing a parser for the JFFS2 file system, commonly used by router operating systems
• dissect.ntfs — A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system
• dissect.ole — A Dissect module implementing a parser for the Object Linking & Embedding (OLE) format, commonly used by document editors on Windows operating systems
• dissect.regf — A Dissect module implementing a parser for Windows registry file format, used to store application and OS configuration on Windows operating systems
• dissect.shellitem — A Dissect module implementing a parser for the Shellitem structures, commonly used by Microsoft Windows
• dissect.sql — A Dissect module implementing a parsers for the SQLite database file format, commonly used by applications to store configuration data
• dissect.squashfs — A Dissect module implementing a parser for the SquashFS file system, commonly used in appliance or device firmware
• dissect.target — This module ties all other Dissect modules together, it provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets)
• dissect.thumbcache — A Dissect module implementing parsers for the thumbcache of Windows systems.
• dissect.vmfs — A Dissect module implementing a parser for the VMFS file system, used by VMware virtualization software
• dissect.volume — A Dissect module implementing a parser for different disk volume and partition systems, for example LVM2, GPT and MBR
• dissect.xfs — A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions
• unblob — Extract files from any kind of container formats