performing-windows-artifact-analysis-with-eric-zimmerman-tools
mukul975/Anthropic-Cybersecurity-Skills
Automates parsing Windows artifacts with Eric Zimmerman’s EZ Tools suite, combining KAPE collection with MFTECmd, PECmd, RECmd, EvtxECmd, and Timeline Explorer output to give responders structured CSV data for registries, prefetch, event logs, and the MFT.