Oct 4, 2023 by Thibault Debatty | 1956 views
https://cylab.be/blog/290/install-eric-zimmermans-forensics-toolkit
Eric Zimmerman has written a collection of powerful forensics analysis tools. The installation process requires some work, but here is a step by step guide to install the tools on a Windows 11 computer.
There are actually 2 caveats for installation:
Download and install the latest version of .NET Desktop Runtime environment from
https://dotnet.microsoft.com/en-us/download/dotnet/6.0
Make sure you download the Desktop Runtime. It's located on the right on the page, as illustrated below...
To change the PowerShelle Execution Policy, open Windows PowerShell as Administrator.
Then type the following command, and hit Y
to accept the change:
Set-ExecutionPolicy RemoteSigned
Now you can download the installation script from
https://f001.backblazeb2.com/file/EricZimmermanTools/Get-ZimmermanTools.zip
Extract the ZIP archive, open the folder in a terminal, and execute the script with
.\Get-ZimmermanTools.ps1
When asked, you can accept to always execute the script (A
):
The installer shows you the progress...
After download and installation, the tools will be available in the net6
directory, like the RegistryExplorer...
Some of the tools are actually command line tools, that are easier to use if their directory is added to the %PATH%
environment variable. To modify your PATH:
Environment variables
buttonPath
variable and click on Edit
If, during installation, you get the error message running scripts is disabled on this system
, it means you forgot to Change PowerShell Execution Policy
This blog post is licensed under CC BY-SA 4.0