I code stuff! However, this is time consuming! Please consider supporting my work via GitHub sponsors: https://github.com/sponsors/EricZimmerman
KapeFiles. This repository serves as a place for community created Targets and Modules for use with KAPE.
861evtx. C# based evtx parser with lots of extras
371LECmd. Lnk Explorer Command line edition!!
347MFTECmd. Parses $MFT from NTFS file systems
327VoronTools. Various scripts and tools
316PECmd. Prefetch Explorer Command Line
304Registry. Full featured, offline Registry parser in C#
257Get-ZimmermanTools. Get all my software
199RECmd. Command line access to the Registry
181AmcacheParser. Parses amcache.hve files, but with a twist!
156bstrings. A better strings utility!
151JumpList. C#
140ericzimmerman.github.io. Software downloads
137AppCompatCacheParser. AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10, and Windows 11
129Prefetch. Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
119JLECmd. Automatic and Custom Destinations jump list parser with Windows 10 support
119Lnk. Lnk file parser
96RegistryPlugins. C#
86MFT. MFT parser
79RBCmd. Recycle bin artifact parser
62Voron24. Voron 2.4 350 configuration files. LDOkit
62SQLECmd. C#
61Srum. C#
53KapeDocs. Documentation repository
49RegistryExplorerBookmarks. Registry Explorer bookmark definitions
45TLEFilePlugins. Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/tag column, layout support, searching, etc.)
34SDB. Parse Microsoft shim databases
32RecentFileCacheParser. Parses RecentFileCacheParser.bcf files
31ExtensionBlocks. Extension blocks as found in ShellBags and other places in the Registry
26WxTCmd. C#
26GuidMapping. C#
25USBDevices. Get USB Devices from Registry hives
22EricZimmerman.
22iisGeolocate. geolocate ip addresses in IIS logs
21Voron02. Voron 0.2 configs (v0s1 --> 0.2)
21Sum. C#
20OleCf. Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does fine)
19VSCMount. Mount VSCs with ease!
18Issues. This is a repository for reporting any issues in any of my software
14timeapp. Simple time and public IP app, useful for recording the screen while interacting with a computer for later corroboration of artifacts against time
12MVT. C#
9DFIR-SQL-Query-Repo. Collection of SQL query templates for digital forensics use by platform and application.
9DeviceIOControlLib. A C# Library to work with the Win32 DeviceIOControl method
7Voron-Documentation. Sources of the documentation website for all Voron 3D printers
7filemgr. File manager with dedupe on import, export existing, export delta, hash list generation, etc.
7ms-compress. Open source implementations of Microsoft compression algorithms
7WinSearchDBAnalyzer. http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html
6libyal. Yet another library library (and tools)
4klipper_config. This is the config of my Voron 2.4 350mm3 Serial:V2.660
3x-tensions. X-Ways C# X-Tension API
2Print-Tuning-Guide. Python
2Be.HexEditor. A modified fork of Be.HexEditor for use in debug tools
2update_klipper_and_mcus. A bash script to update klipper and mcus in one step
2