Eric Zimmerman's tools Cheat Sheet

Incident Responders are on the front lines of intrusion investigations. This guide aims to support DFIR analysts in their quest to uncover the truth.

This cheat sheet covers the basics of using several command line programs by Eric Zimmerman.

May 19, 2021

Related Content

Digital Forensics, Incident Response & Threat Hunting

November 26, 2023

Linux Incident Response - A Guide to syslog-ng

Syslog-ng stands as a sophisticated evolution of the syslog protocol, designed to offer advanced logging capabilities within Linux systems.

Tarot (Taz) Wake

Digital Forensics, Incident Response & Threat Hunting

November 22, 2023

Linux Incident Response - Using ss for Network Analysis

Understanding the ss command is crucial for analyzing network connections & traffic, to identify and investigate potentially malicious activities.

Tarot (Taz) Wake

Digital Forensics, Incident Response & Threat Hunting

November 22, 2023

Linux Incident Response - Introduction to Rootkits

Learn about intricacies of Linux rootkits, the diverse types they encompass, their intricate construction techniques, & their historical evolution.

Tarot (Taz) Wake