Replaceparser

Description: A simple, standalone parser specifically designed to detect file replacement actions by analyzing USN Journal entries. Initially created for testing purposes, it can be used independently.

Features:

  • Focuses solely on parsing and identifying file replacement operations from the USN Journal.

  • Can potentially be integrated as a library into other custom tools.

Note: The provided release executable (.exe) might be outdated compared to the latest source code available on GitHub.

Usage: A dedicated tool for quickly checking if specific files have undergone replacement actions, complementing broader Journal analysis.

Link: https://github.com/spokwn/Replaceparser

Last updated