Indianapolis

Eric

Elite
@EricZimmerman

I code stuff! However, this is time consuming! Please consider supporting my work via GitHub sponsors: https://github.com/sponsors/EricZimmerman

KapeFiles. This repository serves as a place for community created Targets and Modules for use with KAPE.

861

evtx. C# based evtx parser with lots of extras

371

LECmd. Lnk Explorer Command line edition!!

347

MFTECmd. Parses $MFT from NTFS file systems

327

VoronTools. Various scripts and tools

316

PECmd. Prefetch Explorer Command Line

304

Registry. Full featured, offline Registry parser in C#

257

Get-ZimmermanTools. Get all my software

199

RECmd. Command line access to the Registry

181

AmcacheParser. Parses amcache.hve files, but with a twist!

156

bstrings. A better strings utility!

151

JumpList. C#

140

ericzimmerman.github.io. Software downloads

137

AppCompatCacheParser. AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10, and Windows 11

129

Prefetch. Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.

119

JLECmd. Automatic and Custom Destinations jump list parser with Windows 10 support

119

Lnk. Lnk file parser

96

RegistryPlugins. C#

86

MFT. MFT parser

79

RBCmd. Recycle bin artifact parser

62

Voron24. Voron 2.4 350 configuration files. LDOkit

62

SQLECmd. C#

61

Srum. C#

53

KapeDocs. Documentation repository

49

RegistryExplorerBookmarks. Registry Explorer bookmark definitions

45

TLEFilePlugins. Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/tag column, layout support, searching, etc.)

34

SDB. Parse Microsoft shim databases

32

RecentFileCacheParser. Parses RecentFileCacheParser.bcf files

31

ExtensionBlocks. Extension blocks as found in ShellBags and other places in the Registry

26

WxTCmd. C#

26

GuidMapping. C#

25

USBDevices. Get USB Devices from Registry hives

22

EricZimmerman.

22

iisGeolocate. geolocate ip addresses in IIS logs

21

Voron02. Voron 0.2 configs (v0s1 --> 0.2)

21

Sum. C#

20

OleCf. Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does fine)

19

VSCMount. Mount VSCs with ease!

18

Issues. This is a repository for reporting any issues in any of my software

14

timeapp. Simple time and public IP app, useful for recording the screen while interacting with a computer for later corroboration of artifacts against time

12

MVT. C#

9

DFIR-SQL-Query-Repo. Collection of SQL query templates for digital forensics use by platform and application.

9

DeviceIOControlLib. A C# Library to work with the Win32 DeviceIOControl method

7

Voron-Documentation. Sources of the documentation website for all Voron 3D printers

7

filemgr. File manager with dedupe on import, export existing, export delta, hash list generation, etc.

7

ms-compress. Open source implementations of Microsoft compression algorithms

7

WinSearchDBAnalyzer. http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html

6

libyal. Yet another library library (and tools)

4

klipper_config. This is the config of my Voron 2.4 350mm3 Serial:V2.660

3

x-tensions. X-Ways C# X-Tension API

2

Print-Tuning-Guide. Python

2

Be.HexEditor. A modified fork of Be.HexEditor for use in debug tools

2

update_klipper_and_mcus. A bash script to update klipper and mcus in one step

2
53
Apply