Willi Ballenthin

Pure Python parser for Windows Event Log files (.evtx)

williballenthin

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

williballenthin

intel x86(-64) code analysis library that reconstructs control flow

williballenthin

no longer maintained

williballenthin

Resources for reverse engineering Go binaries

williballenthin

Virustotal API for Go

williballenthin

Humane API for storing and accessing persistent data in IDA Pro databases

williballenthin

Fetch and set configuration values from IDAPython scripts

williballenthin

IDA Pro resources, scripts, and configurations

williballenthin

Tool suite for inspecting NTFS artifacts.

williballenthin