Eric Zimmerman's tools Cheat Sheet

Incident Responders are on the front lines of intrusion investigations. This guide aims to support DFIR analysts in their quest to uncover the truth.

This cheat sheet covers the basics of using several command line programs by Eric Zimmerman.

May 19, 2021

Related Content

Finding_Evil_WMI_Event_Consumers_with_Disk_Forensics_-Blog_(1).png

Digital Forensics and Incident Response

Finding Evil WMI Event Consumers with Disk Forensics

This blog covers disk-based artifacts and tools available for use during deeper forensic investigations.

Blog_teaser_images_(19).png

Digital Forensics and Incident Response, Open-Source Intelligence (OSINT)

FOR589: Cybercrime Intelligence - NEW SANS DFIR Course coming in 2024

Learn to hunt for Dark Web Intelligence, Social Engineer cybercriminals, investigate illicit Blockchain activity, and analyze Cryptocurrency evidence

Digital Forensics and Incident Response

Ransomware: Every internet-connected network is at risk. Be prepared!

As ransomware attacks increase in number and severity, even the most advanced security systems can be compromised. Here is what you can do to prepare.