• Stars
    star
    35
  • Rank 747,361 (Top 15 %)
  • Language
    C#
  • License
    MIT License
  • Created almost 4 years ago
  • Updated about 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

More Repositories

1

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.
624
star
2

evtx

C# based evtx parser with lots of extras
C#
258
star
3

LECmd

Lnk Explorer Command line edition!!
C#
252
star
4

Registry

Full featured, offline Registry parser in C#
C#
216
star
5

PECmd

Prefetch Explorer Command Line
C#
200
star
6

VoronTools

Various scripts and tools
Shell
187
star
7

MFTECmd

Parses $MFT from NTFS file systems
C#
174
star
8

Get-ZimmermanTools

Get all my software
PowerShell
129
star
9

RECmd

Command line access to the Registry
Rebol
121
star
10

bstrings

A better strings utility!
C#
118
star
11

AmcacheParser

Parses amcache.hve files, but with a twist!
C#
109
star
12

AppCompatCacheParser

AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
C#
105
star
13

JumpList

C#
103
star
14

Prefetch

Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
C#
103
star
15

ericzimmerman.github.io

Software downloads
HTML
87
star
16

Lnk

Lnk file parser
C#
78
star
17

JLECmd

Automatic and Custom Destinations jump list parser with Windows 10 support
C#
71
star
18

RegistryPlugins

C#
60
star
19

MFT

MFT parser
C#
56
star
20

RegistryExplorerBookmarks

Registry Explorer bookmark definitions
43
star
21

KapeDocs

Documentation repository
HTML
41
star
22

SQLECmd

C#
41
star
23

Voron24

Voron 2.4 350 configuration files. LDOkit
Shell
35
star
24

RBCmd

Recycle bin artifact parser
C#
33
star
25

SDB

Parse Microsoft shim databases
C#
29
star
26

RecentFileCacheParser

Parses RecentFileCacheParser.bcf files
C#
25
star
27

ExtensionBlocks

Extension blocks as found in ShellBags and other places in the Registry
C#
24
star
28

TLEFilePlugins

Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/tag column, layout support, searching, etc.)
C#
23
star
29

USBDevices

Get USB Devices from Registry hives
C#
22
star
30

WxTCmd

C#
20
star
31

OleCf

Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does fine)
C#
19
star
32

Sum

C#
19
star
33

iisGeolocate

geolocate ip addresses in IIS logs
C#
19
star
34

GuidMapping

C#
15
star
35

VSCMount

Mount VSCs with ease!
C#
15
star
36

EricZimmerman

14
star
37

VoronConfigs

Klipper configuration for an LDO Voron V2.4 350mm with Euclid probe
14
star
38

Voron02

Voron 0.2 configs (v0s1 --> 0.2)
Shell
13
star
39

Issues

This is a repository for reporting any issues in any of my software
10
star
40

MVT

C#
9
star
41

timeapp

Simple time and public IP app, useful for recording the screen while interacting with a computer for later corroboration of artifacts against time
C#
9
star
42

filemgr

File manager with dedupe on import, export existing, export delta, hash list generation, etc.
Python
6
star
43

EmailCounter

C#
3
star