performing-windows-artifact-analysis-with-eric-zimmerman-tools

Perform comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite including KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for parsing registry hives, prefetch files, event logs, and file system metadata.

What does this entry provide?

performing-windows-artifact-analysis-with-eric-zimmerman-tools is an agent skill entry in ChatHome Skills, sourced from GitHub Skill Search and scored 58/100. # Performing Windows Artifact Analysis with Eric Zimmerman Tools ## Overview Eric Zimmerman's EZ Tools suite is a collection of open-source forensic utilities t. As an agent skill, it packages a reusable instruction set that AI coding agents such as Codex and Claude Code can load to perform this task without hand-written glue code. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding performing-windows-artifact-analysis-with-eric-zimmerman-tools to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: GitHub Skill Search
Quality: 58/100
Install method: codex
Repo: xtofuub/openrecon-ios
Repo updated: Oct 27, 2026

Install command

codex skill install xtofuub/openrecon-ios

Install method: codex

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Unknown

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

Security signals

Scan coverage: Install metadata and the indexed document body.

Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.

Discovery note

# Performing Windows Artifact Analysis with Eric Zimmerman Tools ## Overview Eric Zimmerman's EZ Tools suite is a collection of open-source forensic utilities that have become the

Report an issue with this listing