Results for “eric-zimmerman”

3 skills

parsing-artifacts-with-eric-zimmerman-tools

Parse Windows forensic artifacts including registry, prefetch, shellbags, MFT, and event logs using Eric Zimmerman's tools and analyze results in Timeline Explorer.

24.6k · bundle

More results

performing-windows-artifact-analysis-with-eric-zimmerman-too

Parse and analyze Windows forensic artifacts including MFT, registry hives, prefetch files, event logs, LNK files, and jump lists using Eric Zimmerman's EZ Tools suite and KAPE.

24.6k · bundle

analyzing-windows-amcache-artifacts

Parses and analyzes the Windows Amcache.hve registry hive to extract evidence of program execution, application installation, and driver loading for digital forensics investigations.

24.6k · bundle