EricZimmerman

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

evtx

C# based evtx parser with lots of extras

LECmd

Lnk Explorer Command line edition!!

PECmd

Prefetch Explorer Command Line

VoronTools

Various scripts and tools

MFTECmd

Parses $MFT from NTFS file systems

JumpList

AppCompatCacheParser

AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10

Prefetch

Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.

ericzimmerman.github.io

Software downloads

Lnk

Lnk file parser

JLECmd

Automatic and Custom Destinations jump list parser with Windows 10 support

RegistryPlugins

MFT

MFT parser

KapeDocs

Documentation repository

SQLECmd

RBCmd

Recycle bin artifact parser

Srum

Voron24

Voron 2.4 350 configuration files. LDOkit

ExtensionBlocks

Extension blocks as found in ShellBags and other places in the Registry

RecentFileCacheParser

Parses RecentFileCacheParser.bcf files

TLEFilePlugins

Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/tag column, layout support, searching, etc.)

OleCf

Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does fine)

Sum

GuidMapping

Voron02

Voron 0.2 configs (v0s1 --> 0.2)

Voron-Documentation

Sources of the documentation website for all Voron 3D printers

DiscUtils

Utility libraries to interact with discs, filesystem formats and more

spoolz

Voron-0

Voron 0 CoreXY 3D Printer design