EricRZimmerman
-
- 422,259 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.1
Offline Registry hive parser, including transaction log support -
- 246,818 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.2
Parses Amcache.hve (Windows 7 to 11) and the Inventory*.db SQLite databases that replace its Root keys from Windows 11 26H1 on -
Lnk
by: EricRZimmerman- 219,948 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.11
Parses Windows shortcut files -
- 75,163 total downloads
- last updated 10/20/2026
- Latest version: 2026.10.2
GUIDs to descriptions -
- 68,601 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.9
ExtensionBlocks -
evtx
by: EricRZimmerman- 31,808 total downloads
- last updated 10/16/2026
- Latest version: 2026.10.0
Parses Windows event logs (evtx format) -
- 24,376 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.10
Parses Windows jumplists (automatic and custom destinations) -
MFT
by: EricRZimmerman- 23,477 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$MFT Parser -
- 17,841 total downloads
- last updated 10/18/2026
- Latest version: 2026.10.0
Raw NTFS reads of locked files, and listing and mounting of Volume Shadow Copies, for Eric Zimmerman's tools -
OleCf
by: EricRZimmerman- 16,768 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.1
Parses OLE compound files (OLECF / CFB), such as jump lists -
I30
by: EricRZimmerman- 10,440 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$I30 parser -
Secure
by: EricRZimmerman- 9,718 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$SDS parser -
- 9,538 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.1
Windows Prefetch parser. Supports all known versions from Windows XP to Windows 11 -
Usn
by: EricRZimmerman- 9,478 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
USN $J parser -
Boot
by: EricRZimmerman- 8,771 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
Boot parser -
- 7,667 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.7
RegistryPluginBase. Use this to create your own Registry Explorer and RECmd plugins! -
O
by: EricRZimmerman- 5,259 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
O Parser -
SDB
by: EricRZimmerman- 5,154 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.0
Parses Windows application compatibility shim database (SDB) files -
- 2,994 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.3
Parses Windows AppCompatCache data from SYSTEM hive -
- 2,527 total downloads
- last updated 7/11/2016
- Latest version: 1.0.1
Shell item related extension blocks
- Previous
- Next