EricRZimmerman

Registry
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 130,435 total downloads
- last updated 11/26/2024
- Latest version: 1.4.2
- registry regf
Offline Registry hive parser, including transaction log support
GuidMapping
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 41,381 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- guid
GUIDs to descriptions
ExtensionBlocks
by: EricRZimmerman
- .NET Standard 2.0
- 40,716 total downloads
- last updated 11/29/2024
- Latest version: 1.4.1
- beef extension block
ExtensionBlocks
Lnk
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 38,865 total downloads
- last updated 11/29/2024
- Latest version: 1.4.0
- lnk link
Parses Windows shortcut files
MFT
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 14,537 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$MFT Parser
JumpList
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 12,814 total downloads
- last updated 11/29/2024
- Latest version: 1.4.0
- jumplist lnk link
Parses Windows jumplists (automatic and custom destinations)
OleCf
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 9,685 total downloads
- last updated 10/31/2023
- Latest version: 1.3.0
- olecf
Parses OLECF containers
evtx
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 8,769 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- evtx event logs
Parses Windows event logs (evtx format)
ERZHelpers
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 5,474 total downloads
- last updated 1/24/2022
- Latest version: 1.3.0
Just some nice helpers
I30
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,782 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$I30 parser
Usn
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,402 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
USN $J parser
Secure
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,268 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$SDS parser
Boot
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,121 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
Boot parser
RegistryPluginBase
by: EricRZimmerman
- .NET Standard 2.0
- 3,453 total downloads
- last updated 12/2/2024
- Latest version: 1.3.2
RegistryPluginBase. Use this to create your own Registry Explorer plugins!
SDB
by: EricRZimmerman
- .NET Standard 2.0
- 3,034 total downloads
- last updated 7/7/2023
- Latest version: 1.3.0
- SDB
Parses Windows SDB files
O
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 2,688 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
O Parser
Prefetch
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 2,650 total downloads
- last updated 7/25/2024
- Latest version: 1.2.4
- pf prefetch
Windows Prefetch parser. Supports all known versions from Windows XP to Windows 11
ExtensionBlocksCore
by: EricRZimmerman
- .NET Standard 1.6
- 1,679 total downloads
- last updated 7/11/2016
- Latest version: 1.0.1
- Shell items shell bags
Shell item related extension blocks
Amcache
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 1,478 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- Amcache Registry
Parses Amcache hives
RawCopy_ERZ
by: EricRZimmerman
- .NET Standard 2.0 .NET Framework 4.5
- 1,023 total downloads
- last updated 12/10/2021
- Latest version: 1.0.0.1
Package Description