
pefile
pefile is a Python module to read and work with PE (Portable Executable) files

pefile is a Python module to read and work with PE (Portable Executable) files

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.

A python library to parse OneNote (.one) files

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

machofile is a module to parse Mach-O binary files

Asclepius validates backup integrity by restoring files and actively testing their recoverability. Instead of trusting metadata, it attempts to parse…

Different methods to get current username without using whoami