13 open source projects by EricZimmerman

Full featured, offline Registry parser in C#

Lnk Explorer Command line edition!!

Software downloads

Parses $MFT from NTFS file systems

Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.

This repository serves as a place for community created Targets and Modules for use with KAPE.

No description, website, or topics provided.

MFT parser

Extension blocks as found in ShellBags and other places in the Registry

Command line access to the Registry

Parses amcache.hve files, but with a twist!

No description, website, or topics provided.

C# based evtx parser with lots of extras