Pure-Rust VHDX (Microsoft VHD's modern successor) reader. Used by Hyper-V and WSL2. Exposes a Rust API and a C ABI suitable for FFI from C/C++/Go/Swift.
Windows NT to XP and Server 2003 event logs (.evt) for forensics: every record in log order, those recovered from the free space, with times, event ids,…
Windows File History catalogs (Catalog1.edb, Catalog2.edb) for forensics: every file and folder backed up, with its path, times, attributes and USN, and the…
Windows 10/11 notifications (wpndatabase.db) for forensics: toasts, tiles and badges apps raised, with their app, times and visible text, and the apps…
Windows Portable Executable (PE) metadata for forensics: compile time, type, sections, imports, exports, import hash, version information, PDB path, resource…
Take custody of Windows child processes: exact handle inheritance, kill-on-close jobs, launches into another session's token, and SDDL-secured pipes. Not a…
The BREP PLM server: parts, revisions, lifecycle, checkout, BOMs and change orders over an embedded SQLite store, with a browser UI and the document API the…
Windows Volume Shadow Copies (VSS) in an NTFS volume: every snapshot with its times, GUIDs and machine names, and each snapshot's view of the volume as a Read…
Markdown as a graph for ikigai: urn:markdown:lift — one generic structural lift (frontmatter, sections, lists, links, code) plus a mapping resource (a lift…
Deterministic code maps and sealed diagram contracts for LLM development harnesses: stable symbol ids, signature and body hashes, a seal lockfile checked in…
Windows image caches for forensics: Explorer's thumbcache and iconcache databases (every thumbnail with its cache id, checksums and image bytes) and the RDP…
Windows BITS job queues for forensics: qmgr.db (Windows 10 and later) and qmgr0.dat/qmgr1.dat (XP to 8.1), each job's owner, files and the command it runs when…
The declarative reconciliation framework for basable nanoservices: typed spec and status rows under a generic envelope, reconciled by claimed, fenced attempts.…
ICU4X for the browser build of Rust MF2's date functions: the crates mf2-fn-datetime's `web-icu` feature formats with, re-exported, so that a native build…