EricRZimmerman

Registry
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 113,918 total downloads
- last updated 11/14/2024
- Latest version: 1.4.0
- registry regf
Offline Registry hive parser, including transaction log support
GuidMapping
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 40,148 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- guid
GUIDs to descriptions
ExtensionBlocks
by: EricRZimmerman
- .NET Standard 2.0
- 39,448 total downloads
- last updated 7/7/2023
- Latest version: 1.3.3
- beef extension block
ExtensionBlocks
Lnk
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 37,599 total downloads
- last updated 4/26/2024
- Latest version: 1.3.8
- lnk link
Parses Windows shortcut files
MFT
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 14,055 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$MFT Parser
JumpList
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 12,364 total downloads
- last updated 10/16/2023
- Latest version: 1.2.7
- jumplist lnk link
Parses Windows jumplists (automatic and custom destinations)
OleCf
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 9,336 total downloads
- last updated 10/31/2023
- Latest version: 1.3.0
- olecf
Parses OLECF containers
evtx
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 8,423 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- evtx event logs
Parses Windows event logs (evtx format)
ERZHelpers
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 5,131 total downloads
- last updated 1/24/2022
- Latest version: 1.3.0
Just some nice helpers
I30
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,586 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$I30 parser
Usn
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,198 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
USN $J parser
Secure
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 4,062 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
$SDS parser
Boot
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 3,931 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
Boot parser
RegistryPluginBase
by: EricRZimmerman
- .NET Standard 2.0
- 3,279 total downloads
- last updated 2/28/2023
- Latest version: 1.3.1.2
RegistryPluginBase. Use this to create your own Registry Explorer plugins!
SDB
by: EricRZimmerman
- .NET Standard 2.0
- 2,985 total downloads
- last updated 7/7/2023
- Latest version: 1.3.0
- SDB
Parses Windows SDB files
O
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 2,605 total downloads
- last updated 3/7/2024
- Latest version: 1.4.2
- $MFT $Boot usn $J $I30 NTFS
O Parser
Prefetch
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 2,540 total downloads
- last updated 7/25/2024
- Latest version: 1.2.4
- pf prefetch
Windows Prefetch parser. Supports all known versions from Windows XP to Windows 11
ExtensionBlocksCore
by: EricRZimmerman
- .NET Standard 1.6
- 1,667 total downloads
- last updated 7/11/2016
- Latest version: 1.0.1
- Shell items shell bags
Shell item related extension blocks
Amcache
by: EricRZimmerman
- .NET 6.0 .NET Standard 2.0
- 1,443 total downloads
- last updated 7/7/2023
- Latest version: 1.2.0
- Amcache Registry
Parses Amcache hives
RawCopy_ERZ
by: EricRZimmerman
- .NET Standard 2.0 .NET Framework 4.5
- 1,011 total downloads
- last updated 12/10/2021
- Latest version: 1.0.0.1
Package Description