windows-forensics
Evidence-preserving digital forensics primitives and composable workflows for analysts, automation systems, and autonomous agents.
Cross-platform registry browser for raw Windows registry files
ExeSpy is a cross-platform PE viewer for EXE and DLL files
Python module for forensic analysis of Windows shortcuts (LNK files). You can install this package using pip install lnkanalyser
