system environment/libraries
- afflib - Library to support the Advanced Forensic Format
- dfwinreg - Library that provides read-only access to Windows Registry objects
- dislocker-libs - Libraries for applications using dislocker
- efilter-1 - EFILTER is a general-purpose destructuring and search language implemented in Python, and suitable for integration with any Python project that requires a search function for some of its data.
- frag_find - NPS Bloom Filter Package
- lame-libs - LAME MP3 encoding library
- libagdb - Library to access the Windows SuperFetch database (AGDB) file format
- libbde - Library to access the BitLocker Drive Encryption (BDE) format
- libbde-python - Python 2 bindings for libbde
- libbde-python3 - Python 3 bindings for libbde
- libbfio - Library to support (abstracted) basic file IO
- libcreg - Library to access the Windows 9x/Me Registry File (CREG) format
- libcreg-python - Python 2 bindings for libcreg
- libcreg-python3 - Python 3 bindings for libcreg
- libesedb - Library to access the Extensible Storage Engine (ESE) Database File (EDB) format
- libesedb-python - Python bindings for libesedb
- libesedb-python3 - Python 3 bindings for libesedb
- libevt - Library to access the Windows Event Log (EVT) format
- libevt-python - Python bindings for libevt
- libevt-python3 - Python 3 bindings for libevt
- libevtx - Library to access the Windows XML Event Log (EVTX) format
- libevtx-python - Python bindings for libevtx
- libevtx-python3 - Python 3 bindings for libevtx
- libewf - Library to support the Expert Witness Compression Format (EWF)
- libewf-python - Python bindings for libewf
- libexe - Library to access the executable (EXE) format
- libexe-python - Python 2 bindings for libexe
- libexe-python3 - Python 3 bindings for libexe
- libfplist - Library to support the plist formats
- libfsapfs - Library to access the Apple File System (APFS) format
- libfsapfs-python - Python 2 bindings for libfsapfs
- libfsapfs-python3 - Python 3 bindings for libfsapfs
- libfsext - Library to access the Extended File System (ext) format
- libfsext-python - Python bindings for libfsext
- libfsext-python3 - Python 3 bindings for libfsext
- libfshfs - Library to access the Hierarchical File System (HFS) format
- libfshfs-python - Python bindings for libfshfs
- libfshfs-python3 - Python 3 bindings for libfsext
- libfsntfs - Library to access the Windows NT File System (NTFS) format
- libfsntfs-python - Python bindings for libfsntfs
- libfsntfs-python3 - Python 3 bindings for libfsntfs
- libfvde - Library to support the FileVault Drive Encryption (FVDE) format
- libfvde-python - Python 2 bindings for libfvde
- libfvde-python3 - Python 3 bindings for libfvde
- libfwevt - Library to support Windows XML Event Log (EVTX) data types.
- libfwnt - Library to support common Windows NT specific formats
- libfwnt-python - Python 2 bindings for libfwnt
- libfwnt-python3 - Python 3 bindings for libfwnt
- libfwsi - Library to access the Windows Shell Item format
- libfwsi-python - Python bindings for libfwsi
- libfwsi-python3 - Python 3 bindings for libfwsi
- libhibr - Library to access the Windows Hibernation File (hiberfil.sys) format
- liblnk - Library to access the Windows Shortcut File (LNK) format
- liblnk-python - Python bindings for liblnk
- liblnk-python3 - Python 3 bindings for liblnk
- libluksde - Library to access the Linux Unified Key Setup (LUKS) Disk Encryption format
- libluksde-python - Python 2 bindings for libluksde
- libluksde-python3 - Python 3 bindings for libluksde
- libmdmp - Library to access the Windows Minidump (MDMP) file format
- libmodi - Library to access the Mac OS disk image formats
- libmodi-python - Python 2 bindings for libmodi
- libmodi-python3 - Python 3 bindings for libmodi
- libmsiecf - Library to access the MSIE Cache File (index.dat) format.
- libmsiecf-python - Python bindings for libmsiecf
- libmsiecf-python3 - Python 3 bindings for libmsiecf
- libnk2 - Library to access the Nickfile (NK2) format
- libnk2-python - Python 2 bindings for libnk2
- libnk2-python3 - Python 3 bindings for libnk2
- libodraw - Library to access optical disc (split) RAW formats
- libolecf - Library to access the Object Linking and Embedding (OLE) Compound File (CF) format
- libolecf-python - Python bindings for libolecf
- libolecf-python3 - Python 3 bindings for libolecf
- libp0f - Provides library implementation of p0f for use with yaf
- libpff - Library to to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format. PFF is used in PAB (Personal Address Book), PST (Personal Storage Table) and OST (Offline Storage Table) files.
- libpff-python - Python binding for libpff
- libpff-python3 - Python 3 bindings for libpff
- libphdi - Library to access the Parallels Hard Disk image format
- libphdi-python - Python 2 bindings for libphdi
- libphdi-python3 - Python 3 bindings for libphdi
- libqcow - Library to access the QEMU Copy-On-Write (QCOW) image file format
- libqcow-python - Python bindings for libqcow
- libqcow-python3 - Python 3 bindings for libqcow
- libregf - Library to access the Windows NT Registry File (REGF) format
- libregf-python - Python bindings for libregf
- libregf-python3 - Python 3 bindings for libregf
- libscca - Library to access the Windows Prefetch File (PF) format
- libscca-python - Python 2 bindings for libscca
- libscca-python3 - Python 3 bindings for libscca
- libsigscan - Library for binary signature scanning
- libsigscan-python - Python 2 bindings for libsigscan
- libsigscan-python3 - Python 3 bindings for libsigscan
- libsmdev - Library to access and read storage media (SM) devices
- libsmdev-python - Python 2 bindings for libsmdev
- libsmdev-python3 - Python 3 bindings for libsmdev
- libsmraw - Library to access the storage media (SM) (split) RAW format
- libsmraw-python - Python bindings for libsmraw
- libsmraw-python3 - Python 3 bindings for libsmraw
- libunrar - Decompress library for RAR v3 archives
- libvhdi - Library to access the Virtual Hard Disk (VHD) image format
- libvhdi-python - Python bindings for libvhdi
- libvhdi-python3 - Python 3 bindings for libvhdi
- libvmdk - Library to access the VMware Virtual Disk (VMDK) format
- libvmdk-python - Python bindings for libvmdk
- libvmdk-python3 - Python 3 bindings for libvmdk
- libvshadow - Library to access the Windows NT Volume Shadow Snapshot (VSS) format
- libvshadow-python - Python bindings for libvshadow
- libvshadow-python3 - Python 3 bindings for libvshadow
- libvslvm - Library to access the Linux Logical Volume Manager (LVM) volume system
- libvslvm-python - Python 2 bindings for libvslvm
- libvslvm-python3 - Python 3 bindings for libvslvm
- libvsmbr - Library to access the Master Boot Record (MBR) volume system
- libvsmbr-python - Python 2 bindings for libvsmbr
- libvsmbr-python3 - Python 3 bindings for libvsmbr
- libwrc - Library to access the Windows Resource Compiler (WRC) format
- libwrc-python - Python 2 bindings for libwrc
- libwrc-python3 - Python 3 bindings for libwrc
- libwtcdb - Library to access the Windows Explorer thumbnail cache database (WTCDB) format
- packetexaminer - PacketExaminer - Analyze PCAP files
- silk-ipset-lib - The SiLK IPset library
- sleuthkit-libs - Library for sleuthkit
- xlsxwriter - Python module for writing files in the Excel 2007+ XLSX file format
- xvidcore - MPEG-4 Simple and Advanced Simple Profile codec
- zeromq - Software library for fast, message-based applications