EricZimmerman/OleCf EricZimmerman/OleCf

  • Stars
    star
    19
  • Rank 1,157,884 (Top 23 %)
  • Language
    C#
  • License
    MIT License
  • Created over 8 years ago
  • Updated 11 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
EricZimmerman/OleCf
github

EricZimmerman

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does fine)

More Repositories

1

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.
624
star
2

evtx

C# based evtx parser with lots of extras
C#
258
star
3

LECmd

Lnk Explorer Command line edition!!
C#
252
star
4

Registry

Full featured, offline Registry parser in C#
C#
216
star
5

PECmd

Prefetch Explorer Command Line
C#
200
star
6

VoronTools

Various scripts and tools
Shell
187
star
7

MFTECmd

Parses $MFT from NTFS file systems
C#
174
star
8

Get-ZimmermanTools

Get all my software
PowerShell
129
star
9

RECmd

Command line access to the Registry
Rebol
121
star
10

bstrings

A better strings utility!
C#
118
star
11

AmcacheParser

Parses amcache.hve files, but with a twist!
C#
109
star
12

AppCompatCacheParser

AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
C#
105
star
13

JumpList

C#
103
star
14

Prefetch

Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
C#
103
star
15

ericzimmerman.github.io

Software downloads
HTML
87
star
16

Lnk

Lnk file parser
C#
78
star
17

JLECmd

Automatic and Custom Destinations jump list parser with Windows 10 support
C#
71
star
18

RegistryPlugins

C#
60
star
19

MFT

MFT parser
C#
56
star
20

RegistryExplorerBookmarks

Registry Explorer bookmark definitions
43
star
21

KapeDocs

Documentation repository
HTML
41
star
22

SQLECmd

C#
41
star
23

Voron24

Voron 2.4 350 configuration files. LDOkit
Shell
35
star
24

Srum

C#
35
star
25

RBCmd

Recycle bin artifact parser
C#
33
star
26

SDB

Parse Microsoft shim databases
C#
29
star
27

RecentFileCacheParser

Parses RecentFileCacheParser.bcf files
C#
25
star
28

ExtensionBlocks

Extension blocks as found in ShellBags and other places in the Registry
C#
24
star
29

TLEFilePlugins

Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/tag column, layout support, searching, etc.)
C#
23
star
30

USBDevices

Get USB Devices from Registry hives
C#
22
star
31

WxTCmd

C#
20
star
32

Sum

C#
19
star
33

iisGeolocate

geolocate ip addresses in IIS logs
C#
19
star
34

GuidMapping

C#
15
star
35

VSCMount

Mount VSCs with ease!
C#
15
star
36

EricZimmerman

14
star
37

VoronConfigs

Klipper configuration for an LDO Voron V2.4 350mm with Euclid probe
14
star
38

Voron02

Voron 0.2 configs (v0s1 --> 0.2)
Shell
13
star
39

Issues

This is a repository for reporting any issues in any of my software
10
star
40

MVT

C#
9
star
41

timeapp

Simple time and public IP app, useful for recording the screen while interacting with a computer for later corroboration of artifacts against time
C#
9
star
42

filemgr

File manager with dedupe on import, export existing, export delta, hash list generation, etc.
Python
6
star
43

EmailCounter

C#
3
star