EZ Tools Manuals

Enabling Update Notifications on Leanpub

Introduction to EZ Tools

1. What are EZ Tools?
2. Download EZ Tools
3. CLI vs GUI
4. .NET 4 vs .NET 6 EZ Tools
5. What is this book?
6. Mastering EZ Tools
7. Content by Eric Zimmerman
8. Content by the DFIR Community about EZ Tools

EZ Tools - Common Switches

1. Common Switches

EZ Tools - PowerShell vs CMD

1. Common Scenarios

EZ Tools - CLI

AmcacheParser

1. AmcacheParser Introduction
2. AmcacheParser Switches
3. AmcacheParser Command Examples
4. AmcacheParser Output
5. AmcacheParser Key Takeaways
6. AmcacheParser References

AppCompatCacheParser

1. AppCompatCacheParser Introduction
2. AppCompatCacheParser Switches
3. AppCompatCacheParser Command Examples
4. AppCompatCacheParser Output
5. AppCompatCacheParser Key Takeaways
6. AppCompatCacheParser References

bstrings

1. bstrings Introduction
2. bstrings Switches
3. bstrings Command Examples
4. bstrings References

EvtxECmd

1. EvtxECmd Introduction
2. EvtxECmd Switches
3. EvtxECmd Command Examples
4. EvtxECmd Output
5. EvtxECmd Key Takeaways
6. EvtxECmd References

IISGeoLocate

1. IISGeoLocate Introduction
2. IISGeoLocate Switches
3. IISGeoLocate Output
4. IISGeoLocate References

JLECmd

1. JLECmd Introduction
2. JLECmd Switches
3. JLECmd Command Examples
4. JLECmd Output
5. JLECmd Sample Output
6. JLECmd Key Takeaways
7. JLECmd References

LECmd

1. LECmd Introduction
2. LECmd Switches
3. LECmd Command Examples
4. LECmd Sample Output
5. LECmd Output
6. LECmd Key Takeaways
7. LECmd References

MFTECmd

1. MFTECmd Introduction
2. File Types Parsed by MFTECmd
3. MFTECmd Switches
4. MFTECmd Command Examples
5. MFTECmd Output
6. MFTECmd References

PECmd

1. PECmd Introduction
2. PECmd Switches
3. PECmd Command Examples
4. PECmd Output
5. PECmd Key Takeaways
6. PECmd References

RBCmd

1. RBCmd Introduction
2. RBCmd Switches
3. RBCmd Command Examples
4. RBCmd Output
5. RBCmd Key Takeaways
6. RBCmd References

RecentFileCacheParser

1. RecentFileCacheParser Introduction
2. RecentFileCacheParser Switches
3. RecentFileCacheParser Command Examples
4. RecentFileCacheParser Output
5. RecentFileCacheParser References

RECmd

1. RECmd Introduction
2. RECmd Switches
3. RECmd Command Examples
4. RECmd Output
5. RECmd References

RLA

1. RLA Introduction
2. RLA Switches
3. RLA Command Examples
4. RLA References

SBECmd

1. SBECmd Introduction
2. SBECmd Switches
3. SBECmd Command Examples
4. SBECmd Output
5. SBECmd Key Takeaways
6. SBECmd References

SQLECmd

1. SQLECmd Introduction
2. SQLECmd Switches
3. SQLECmd Command Examples
4. SQLECmd References

SrumECmd

1. SrumECmd Introduction
2. SrumECmd Switches
3. SrumECmd Command Examples
4. SrumECmd Output
5. SrumECmd Sample Data
6. SrumECmd References

SumECmd

1. SumECmd Introduction
2. SumECmd Switches
3. SumECmd Command Examples
4. SumECmd Output
5. SumECmd References

VSCMount

1. VSCMount Introduction
2. VSCMount Switches
3. VSCMount Command Examples
4. VSCMount References

WxTCmd

1. WxTCmd Introduction
2. WxTCmd Switches
3. WxTCmd Command Examples
4. WxTCmd Output
5. WxTCmd Key Takeaways
6. WxTCmd References

EZ Tools - GUI

EZViewer

1. EZViewer Introduction
2. EZViewer Screenshot
3. EZViewer Key Takeaways
4. EZViewer References

Hasher

1. Hasher Introduction
2. Hasher Screenshot
3. Hasher Features
4. Hasher References

JumpList Explorer

1. JumpList Explorer Introduction
2. JumpList Explorer Functionality
3. JumpList Explorer References

MFT Explorer

1. MFT Explorer Introduction
2. MFT Explorer Features
3. MFT Explorer References

Registry Explorer

1. Registry Explorer Introduction
2. RECmd
3. Version changes

SDB Explorer

1. SDB Explorer Introduction
2. SDB Explorer References

Shellbags Explorer

1. Requirements
2. What are ShellBags?
3. ShellBags location in the registry
4. Using RegEdit to view ShellBag data
5. Why another ShellBags program?
6. ShellBagsExplorer.exe
7. Menus
8. Workflow overview
9. SBECmd.exe
10. General usage tips and tricks
11. Version changes

TimeApp

1. TimeApp Introduction
2. TimeApp Screenshots
3. TimeApp References

Timeline Explorer

1. Timeline Explorer Introduction
2. Timeline Explorer Features
3. Timeline Explorer Settings
4. Timeline Explorer Layout Files
5. Timeline Explorer Plugins
6. Timeline Explorer References

XWFIM

1. Using XWFIM
2. XWFIM References

Errata

1. Reporting Errata