EricZimmerman / JLECmd
Automatic and Custom Destinations jump list parser with Windows 10 support
☆74Updated last year
Related projects ⓘ
Alternatives and complementary repositories for JLECmd
- Command line access to the Registry☆130Updated this week
- ☆60Updated this week
- Registry Explorer bookmark definitions☆41Updated last year
- MFT parser☆61Updated 7 months ago
- Extension blocks as found in ShellBags and other places in the Registry☆23Updated 2 months ago
- ☆15Updated 2 months ago
- Full featured, offline Registry parser in C#☆220Updated 2 months ago
- A better strings utility!☆120Updated last year
- ☆105Updated 2 months ago
- Lnk file parser☆78Updated 2 months ago
- Mount VSCs with ease!☆14Updated last year
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆22Updated this week
- Documentation repository☆43Updated 2 months ago
- ☆46Updated last week
- ☆36Updated 2 months ago
- geolocate ip addresses in IIS logs☆18Updated last year
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆105Updated 3 months ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆43Updated last year
- Decode security descriptors in $Secure on NTFS☆20Updated 2 years ago
- Windows Registry Knowledge Base☆162Updated last month
- Get all my software☆141Updated last month
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆177Updated last year
- Software downloads☆92Updated this week
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆36Updated 3 months ago
- Parses the WMI object database....looking for persistence☆31Updated 4 years ago
- Parses RecentFileCacheParser.bcf files☆24Updated 2 months ago
- Parse Microsoft shim databases☆28Updated 2 months ago
- Windows registry samples☆23Updated 5 years ago
- Tool suite for inspecting NTFS artifacts.☆216Updated last year
- AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10☆109Updated this week