Projects with this topic
Sort by:
-
Sam The Butcher - Raw Disk Credential Extractor for Windows NTFS - Sam The Butcher is a single-file, standalone Windows executable that extracts credential hives (SAM, SYSTEM, SECURITY) and other locked files by reading the raw NTFS disk directly — bypassing file locks, EDR minifilters, and standard Windows access controls.
Updated -
C++ NTFS parser for file system change forensics
Updated -
C++ NTFS Alternate Data Stream scanner for hidden data detection
Updated -
-
Windows tool to monitor file system changes and remove NTFS Zone.Identifier streams as they are created
Updated -