williballenthin/process-forest
Reconstruct process trees from event logs
Recover event log entries from an image by heurisitically looking for record structures.
This repository is cataloged as part of our automated global GitHub synchronization. Full telemetry, velocity snapshots, and code summaries are scheduled for continuous enrichment.
Reconstruct process trees from event logs
Open source Python library for NTFS analysis
no longer maintained
no longer maintained