explainx.ainewsletter3.4k
tag

eric-zimmerman▌

2 indexed skills · max 10 per page

skills (2)

performing-windows-artifact-analysis-with-eric-zimmerman-tools

mukul975/Anthropic-Cybersecurity-Skills · performing-windows-artifact-analysis-with-eric-zimmerman-tools

0

Perform comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite including KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for parsing registry hives, prefetch files, event logs, and file system metadata.

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills · analyzing-windows-amcache-artifacts

0

Parses and analyzes the Windows Amcache.hve registry hive to extract evidence of program execution, application installation, and driver loading for digital forensics investigations. Uses Eric Zimmerman's AmcacheParser and Timeline Explorer for artifact extraction, SHA-1 hash correlation with threat intel, and timeline reconstruction. Activates for requests involving Amcache forensics, program execution evidence, Windows artifact analysis, or application compatibility cache investigation.