cargo / bam-core

bam-core

cargo

Pure-Rust read-only decoder for the Windows Background Activity Moderator (BAM/DAM) execution-evidence record — decodes a bam State value (executable path + last-execution FILETIME) from its value name and raw bytes. No hive I/O; panic-free.

0 audits github.com/SecurityRonin/bam-forensic

Audits

No audits for this package yet.