Replaceparser
Description: A simple, standalone parser specifically designed to detect file replacement actions by analyzing USN Journal entries. Initially created for testing purposes, it can be used independently.
Features:
Focuses solely on parsing and identifying file replacement operations from the USN Journal.
Can potentially be integrated as a library into other custom tools.
Note: The provided release executable (.exe
) might be outdated compared to the latest source code available on GitHub.
Usage: A dedicated tool for quickly checking if specific files have undergone replacement actions, complementing broader Journal analysis.
Link: https://github.com/spokwn/Replaceparser
Last updated