EricRZimmerman
-
- 422,599 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.1
Offline Registry hive parser, including transaction log support -
- 246,835 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.2
Parses Amcache.hve (Windows 7 to 11) and the Inventory*.db SQLite databases that replace its Root keys from Windows 11 26H1 on -
Lnk
by: EricRZimmerman- 220,237 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.11
Parses Windows shortcut files -
- 75,610 total downloads
- last updated 10/20/2026
- Latest version: 2026.10.2
GUIDs to descriptions -
- 68,864 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.9
ExtensionBlocks -
evtx
by: EricRZimmerman- 32,039 total downloads
- last updated 10/16/2026
- Latest version: 2026.10.0
Parses Windows event logs (evtx format) -
- 24,555 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.10
Parses Windows jumplists (automatic and custom destinations) -
MFT
by: EricRZimmerman- 23,500 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$MFT Parser -
- 17,881 total downloads
- last updated 10/18/2026
- Latest version: 2026.10.0
Raw NTFS reads of locked files, and listing and mounting of Volume Shadow Copies, for Eric Zimmerman's tools -
OleCf
by: EricRZimmerman- 16,921 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.1
Parses OLE compound files (OLECF / CFB), such as jump lists -
I30
by: EricRZimmerman- 10,464 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$I30 parser -
Secure
by: EricRZimmerman- 9,734 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
$SDS parser -
- 9,762 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.1
Windows Prefetch parser. Supports all known versions from Windows XP to Windows 11 -
Usn
by: EricRZimmerman- 9,502 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
USN $J parser -
Boot
by: EricRZimmerman- 8,785 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
Boot parser -
- 7,681 total downloads
- last updated 10/29/2026
- Latest version: 2026.10.7
RegistryPluginBase. Use this to create your own Registry Explorer and RECmd plugins! -
O
by: EricRZimmerman- 5,262 total downloads
- last updated 10/24/2026
- Latest version: 2026.10.4
O Parser -
SDB
by: EricRZimmerman- 5,154 total downloads
- last updated 10/15/2026
- Latest version: 2026.10.0
Parses Windows application compatibility shim database (SDB) files -
- 3,011 total downloads
- last updated 10/22/2026
- Latest version: 2026.10.3
Parses Windows AppCompatCache data from SYSTEM hive -
- 2,527 total downloads
- last updated 7/11/2016
- Latest version: 1.0.1
Shell item related extension blocks
- Previous
- Next