Eric Zimmerman's tools Cheat Sheet

Incident Responders are on the front lines of intrusion investigations. This guide aims to support DFIR analysts in their quest to uncover the truth.

This cheat sheet covers the basics of using several command line programs by Eric Zimmerman.

May 19, 2021

Related Content

Digital Forensics and Incident Response

January 20, 2022

SANS DFIR courses - Justify your training

Use these justification letter templates to share the key details of this training and certification opportunities with your boss.

Digital Forensics and Incident Response, Cybersecurity and IT Essentials, Industrial Control Systems Security, Purple Team, Open-Source Intelligence (OSINT), Penetration Testing and Ethical Hacking, Cyber Defense, Cloud Security, Security Management, Legal, and Audit

December 8, 2021

Good News: SANS Virtual Summits Will Remain FREE for the Community in 2022

They’re virtual. They’re global. They’re free.

Digital Forensics and Incident Response

WMIC for incident response

Earlier this week, I posted about using psexec during incident response. I mentioned at the end of that post that I've been using WMIC in place of psexec and that I'd have more on that later. This post, is a follow up to the psexec post. WMIC Prompted by the excellent work of Ed Skoudis and his...

Mike Pilkington