Overview

Joachim Metz edited this page Mar 16, 2018 · 237 revisions

This is an overview of the libyal projects, check the project sites themselves for more information about the status of the individual projects.

Cross-platform functionality

Several libraries for cross-platform C functions.

Project Description Travis-CI AppVeyor Codecov
libcdata generic data functions Build status Build status codecov
libcdatetime date and time functions Build status Build status codecov
libcdirectory directory functions Build status Build status codecov
libcerror error functions Build status Build status codecov
libcfile file functions Build status Build status codecov
libclocale locale functions Build status Build status codecov
libcnotify notification functions Build status Build status codecov
libcpath path functions Build status Build status codecov
libcsplit split string functions Build status Build status codecov
libcthreads threads functions Build status Build status codecov

Data formats

Several libraries for different types of file format data.

Project Description Travis-CI AppVeyor Codecov
libcaes AES encryption functions Build status Build status codecov
libfcache generic file data cache functions Build status Build status codecov
libfcrypto encryption formats Build status Build status codecov
libfdata generic file data functions Build status Build status codecov
libfdatetime for date and time formats Build status Build status codecov
libfguid for GUID/UUID format Build status Build status codecov
libfmapi for Message API (MAPI) data types Build status Build status codecov
libfole for Object Linking and Embedding (OLE) data types Build status Build status codecov
libfplist for plist formats Build status Build status codecov
libftxf for Transactional NTFS (TxF) data types Build status Build status codecov
libftxr for Transactional Registry (TxR) data types Build status Build status codecov
libfusn for Update Sequence Number (USN) Journal data types Build status Build status codecov
libfvalue generic file value functions Build status Build status codecov
libfwevt for Windows XML Event Log (EVTX) data types Build status Build status codecov
libfwnt for Windows NT data types Build status Build status codecov
libfwps for Windows Property Store data types Build status Build status codecov
libfwsi for Windows Shell Item data types Build status Build status codecov
libhmac Hash-based Message Authentication Codes (HMAC) Build status Build status codecov
libuna Unicode and ASCII (byte string) conversions Build status Build status codecov

File formats

Several libraries for different types of file formats.

Project Description Travis-CI AppVeyor Codecov
libagdb Windows SuperFetch database format Build status Build status codecov
libcreg Windows 9x/Me Registry File (CREG) format Build status Build status codecov
libesedb Extensible Storage Engine (ESE) Database File (EDB) format Build status Build status codecov
libevt Windows Event Log (EVT) format Build status Build status codecov
libevtx Windows XML Event Log (EVTX) format Build status Build status codecov
libexe PE/COFF Executable (EXE) format Build status Build status codecov
liblnk Windows Shortcut File (LNK) format Build status Build status codecov
libmdmp Windows Minidump (MDMP) format Build status Build status codecov
libmsiecf Microsoft Internet Explorer (MSIE) Cache File (index.dat) format Build status Build status codecov
libnk2 Microsoft Outlook Nickfile (NK2) format Build status Build status codecov
libnsfdb Notes Storage Facility (NSF) database file format Build status Build status codecov
libolecf OLE 2 Compound File (OLECF) format Build status Build status codecov
libpff Personal Folder File (PFF) format Build status Build status codecov
libregf Windows NT Registry File (REGF) format Build status Build status codecov
libscca Windows Prefetch File (SCCA) format Build status Build status codecov
libwtcdb Windows (Vista/7) Explorer thumbnail cache database format (thumbcache.db) Build status Build status codecov

In-file formats

Several libraries for different types of in-file formats.

Project Description Travis-CI AppVeyor Codecov
libmapidb Exchange MAPI database format Build status Build status codecov
libwrc Windows Resource Compiler (WRC) format Build status Build status codecov

File system formats

Several libraries for different types of file systems.

Project Description Travis-CI AppVeyor Codecov
libfsclfs Common Log File System (CLFS) format Build status Build status codecov
libfsext Extended File System (EXT) format Build status Build status codecov
libfshfs Hierarchical File System (HFS) format Build status Build status codecov
libfsntfs New Technology File System (NTFS) format Build status Build status codecov
libfsrefs Resilient File System (ReFS) format Build status Build status codecov

Volume (system) formats

Several libraries for different types of volume (system) formats.

Project Description Travis-CI AppVeyor Codecov
libbde BitLocker drive encryption (BDE) Build status Build status codecov
libfvde FileVault drive encryption (FVDE) Build status Build status codecov
libluksde LUKS Disk Encryption Build status Build status codecov
libvshadow Volume Shadow Snapshot (VSS) format Build status Build status codecov
libvslvm Linux Logical Volume Manager (LVM) volume system format Build status Build status codecov
libvsmbr Master Boot Record (MBR) volume system format Build status Build status codecov

Storage media image formats

Several libraries for different types of storage media image formats.

Project Description Travis-CI AppVeyor Codecov
libewf Expert Witness Compression Format (EWF) image format Build status Build status codecov
libhibr Windows Hibernation File (hiberfil.sys) format Build status Build status codecov
libmodi Mac OS disk image formats Build status Build status codecov
libodraw optical disc (split) RAW image format (bin/cue, iso/cue) Build status Build status codecov
libovf Open Virtualization Format (OVF) (at the moment documentation only)
libphdi Parallels Hard Disk image format Build status Build status codecov
libqcow QEMU Copy-On-Write (QCOW) image format Build status Build status codecov
libsgzip seekable GZIP format (at the moment documentation only)
libsmdev storage media devices Build status Build status codecov
libsmraw (split) RAW image format Build status Build status codecov
libvhdi Virtual Hard Disk (VHD) image format Build status Build status codecov
libvmdk VMware Virtual Disk (VMDK) format Build status Build status codecov

Utility libraries

Several libraries for different "utility" functionality.

Project Description Travis-CI AppVeyor Codecov
libbfio basic file input/output abstraction Build status Build status codecov
libsigscan binary signature scanning Build status Build status codecov
libtableau read metadata from Tableau(TM) forensic bridges (write blockers) Build status Build status codecov

Legacy projects

Projects that will be discontinued.

Project Description Travis-CI AppVeyor Codecov
libcstring string functions Build status Build status codecov
libcsystem system functions Build status Build status codecov
libewf-legacy Expert Witness Compression Format (EWF) image format Build status Build status codecov

Non-library projects

  • assorted; Assorted documentation, scripts and tools
  • dtfabric; Data type and structure management
  • ReviveIt (revit); Proof of concept file carver that uses Smart Carving

Knowledge base projects

  • esedb-kb; Extensible Storage Engine (ESE) Database File Knowledge Base
  • olecf-kb; OLE Compound File (OLECF) Knowledge Base
  • winevt-kb; Windows Event Log Knowledge Base
  • winreg-kb; Windows Registry Knowledge Base
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.