Eric Zimmerman's tools Cheat Sheet

Incident Responders are on the front lines of intrusion investigations. This guide aims to support DFIR analysts in their quest to uncover the truth.

This cheat sheet covers the basics of using several command line programs by Eric Zimmerman.

May 19, 2021

Related Content

emerging threats summit 340x340.png

Digital Forensics, Incident Response & Threat Hunting, Offensive Operations, Pen Testing, and Red Teaming, Cyber Defense, Industrial Control Systems Security, Cybersecurity Leadership

Visual Summary of SANS Emerging Threats Summit 2025

Check out these graphic recordings created in real-time throughout the event for SANS Emerging Threats Summit 2025

DFIR - Blog - Running EZ Tools Natively on Linux_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Running EZ Tools Natively on Linux: A Step-by-Step Guide

Developed by Eric Zimmerman, the EZ Tools suite is a collection of utilities written to assist with multiple aspects of forensic analysis.

Cyber Defense, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Offensive Operations, Pen Testing, and Red Teaming

Month of PowerShell - Windows File Server Enumeration

In this Month of PowerShell article we look at several commands to interrogate Windows SMB servers as part of our incident response toolkit.