EricRZimmerman 

Offline Registry hive parser, including transaction log support

Parses Amcache hives

Parses Windows shortcut files

GUIDs to descriptions

ExtensionBlocks

$MFT Parser

Parses Windows jumplists (automatic and custom destinations)

Parses Windows event logs (evtx format)

Parses OLECF containers

Just some nice helpers

$I30 parser

USN $J parser

$SDS parser

Boot parser

RegistryPluginBase. Use this to create your own Registry Explorer plugins!

Windows Prefetch parser. Supports all known versions from Windows XP to Windows 11

Parses Windows SDB files

O Parser

Shell item related extension blocks

Package Description