Overview

This is an overview of the libyal projects, check the project sites themselves for more information about the status of the individual projects.

Cross-platform functionality

Several libraries for cross-platform C functions.

Project	Description	Status	AppVeyor	Codecov
libcdata	generic data functions
libcdatetime	date and time functions
libcdirectory	directory functions
libcerror	error functions
libcfile	file functions
libclocale	locale functions
libcnotify	notification functions
libcpath	path functions
libcsplit	split string functions
libcthreads	threads functions

Data formats

Several libraries for different types of file format data.

Project	Description	Status	AppVeyor	Codecov
libcaes	AES encryption functions
libfcache	generic file data cache functions
libfcrypto	encryption formats
libfdata	generic file data functions
libfdatetime	for date and time formats
libfguid	for GUID/UUID format
libfmapi	for Message API (MAPI) data types
libfmos	for Mac OS data types
libfole	for Object Linking and Embedding (OLE) data types
libfplist	for plist formats
libftxf	for Transactional NTFS (TxF) data types
libftxr	for Transactional Registry (TxR) data types
libfusn	for Update Sequence Number (USN) Journal data types
libfvalue	generic file value functions
libfwevt	for Windows XML Event Log (EVTX) data types
libfwnt	for Windows NT data types
libfwps	for Windows Property Store data types
libfwsi	for Windows Shell Item data types
libhmac	Hash-based Message Authentication Codes (HMAC)
libuna	Unicode and ASCII (byte string) conversions

File formats

Several libraries for different types of file formats.

Project	Description	Status	AppVeyor	Codecov
libagdb	Windows SuperFetch database format
libcreg	Windows 9x/Me Registry File (CREG) format
libesedb	Extensible Storage Engine (ESE) Database File (EDB) format
libevt	Windows Event Log (EVT) format
libevtx	Windows XML Event Log (EVTX) format
libexe	PE/COFF Executable (EXE) format
libgzipf	GZIP file format
liblnk	Windows Shortcut File (LNK) format
libmdmp	Windows Minidump (MDMP) format
libmsiecf	Microsoft Internet Explorer (MSIE) Cache File (index.dat) format
libnk2	Microsoft Outlook Nickfile (NK2) format
libnsfdb	Notes Storage Facility (NSF) database file format
libolecf	OLE 2 Compound File (OLECF) format
libpff	Personal Folder File (PFF) format
libregf	Windows NT Registry File (REGF) format
libscca	Windows Prefetch File (SCCA) format
libwtcdb	Windows (Vista/7) Explorer thumbnail cache database format (thumbcache.db)

In-file formats

Several libraries for different types of in-file formats.

Project	Description	Status	AppVeyor	Codecov
libmapidb	Exchange MAPI database format
libwrc	Windows Resource Compiler (WRC) format

File system formats

Several libraries for different types of file systems.

Project	Description	Status	AppVeyor	Codecov
libfsapfs	Apple File System (APFS) format
libfsclfs	Common Log File System (CLFS) format
libfsext	Extended File System (EXT) format
libfsfat	File Allocation Table (FAT) file system format
libfshfs	Hierarchical File System (HFS) format
libfsntfs	New Technology File System (NTFS) format
libfsrefs	Resilient File System (ReFS) format
libfsxfs	X File System (XFS) format

Volume (system) formats

Several libraries for different types of volume (system) formats.

Project	Description	Status	AppVeyor	Codecov
libbde	BitLocker drive encryption (BDE)
libfvde	FileVault drive encryption (FVDE)
libluksde	LUKS Disk Encryption
libvsapm	Apple Partition Map (APM) volume system format
libvsbsdl	BSD disklabel volume system format
libvsgpt	GUID Partition Table (GPT) volume system format
libvshadow	Volume Shadow Snapshot (VSS) format
libvslvm	Linux Logical Volume Manager (LVM) volume system format
libvsmbr	Master Boot Record (MBR) volume system format

Storage media image formats

Several libraries for different types of storage media image formats.

Project	Description	Status	AppVeyor	Codecov
libewf	Expert Witness Compression Format (EWF) image format
libhibr	Windows Hibernation File (hiberfil.sys) format
libmodi	Mac OS disk image formats
libodraw	optical disc (split) RAW image format (bin/cue, iso/cue)
libovf	Open Virtualization Format (OVF) (at the moment documentation only)
libphdi	Parallels Hard Disk image format
libqcow	QEMU Copy-On-Write (QCOW) image format
libsgzip	seekable GZIP format (at the moment documentation only)
libsmdev	storage media devices
libsmraw	(split) RAW image format
libvhdi	Virtual Hard Disk (VHD) image format
libvmdk	VMware Virtual Disk (VMDK) format

Utility libraries

Several libraries for different "utility" functionality.

Project	Description	Status	AppVeyor	Codecov
libbfio	basic file input/output abstraction
libbfoverlay	basic file overlay support
libsigscan	binary signature scanning
libtableau	read metadata from Tableau(TM) forensic bridges (write blockers)

Legacy projects

Projects that will be discontinued.

Project	Description	Status	AppVeyor	Codecov
libewf-legacy	Expert Witness Compression Format (EWF) image format

Non-library projects

• assorted; Assorted documentation, scripts and tools
• dtfabric; Data type and structure management
• ReviveIt (revit); Proof of concept file carver that uses Smart Carving

Knowledge base projects

Project	Description	Status	AppVeyor	Codecov
esedb-kb	Extensible Storage Engine (ESE) Database File Knowledge Base
mapi-kb	Messaging API (MAPI) Knowledge Base
olecf-kb	OLE Compound File (OLECF) Knowledge Base
plist-kb	Extensible Storage Engine (ESE) Database File Knowledge Base
sqlite-kb	Extensible Storage Engine (ESE) Database File Knowledge Base
winevt-kb	Windows Event Log Knowledge Base
winreg-kb	Windows Registry Knowledge Base
winsps-kb	Windows Serialized Property Store (SPS) Knowledge Base