Your use of the packages on this site means you understand they are not supported or guaranteed in any way. Due to the nature of a public repository and unreliability due to distribution rights, these packages should not be used as is for organizational purposes either. Learn more.

  1. C:\> choco install sandboxie.install

    Package testing. See package page for more details. Sandboxie (Install) 5.28

    By:

    A process sandbox helps to manage and limit access permissions a process has to your data. Use it to safely test new software for usability, safely study behavior of known spyware and malware, or browse the web from a sandboxed browser to completely shield your computer and network from Internet Bad Things. ### Features * Secure Web Browsing: Run... More information

  2. C:\> choco install sandboxie

    Package testing. See package page for more details. Sandboxie 5.28

    By:

    A process sandbox helps to manage and limit access permissions a process has to your data. Use it to safely test new software for usability, safely study behavior of known spyware and malware, or browse the web from a sandboxed browser to completely shield your computer and network from Internet Bad Things. ### Features * Secure Web Browsing: Run... More information

  3. C:\> choco install ericzimmermantools

    Package testing. See package page for more details. Eric Zimmerman's tools 2.5.2.2

    By:

    Installs tools for lnk files, jump lists, Registry hives, hashing, and much more

  4. C:\> choco install eraser

    Package testing. See package page for more details. Eraser 6.2.0.2982

    By:

    Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Eraser is currently supported under Windows XP (with Service Pack 3), Windows Server 2003 (with Service Pack 2), Windows Vista, Windows Server 2008, Windows 7,8 ,... More information

  5. C:\> choco install timelineexplorer

    Package testing. See package page for more details. Timeline Explorer 0.8.11.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  6. C:\> choco install registryexplorer

    Package testing. See package page for more details. [DEPRECIATED] Registry Explorer 1.3.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  7. C:\> choco install shellbagsexplorer

    Package testing. See package page for more details. [DEPRECIATED] ShellBags Explorer 1.3.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  8. C:\> choco install appcompat-cacheparser

    Package testing. See package page for more details. [DEPRECIATED] AppCompatCache parser 1.4.0.2

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  9. C:\> choco install lecmd

    Package testing. See package page for more details. [DEPRECIATED] LECmd 1.2.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  10. C:\> choco install amcacheparser

    Package testing. See package page for more details. [DEPRECIATED] Amcache parser 1.3.0.2

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  11. C:\> choco install pecmd

    Package testing. See package page for more details. [DEPRECIATED] PECmd 1.2.0.3

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  12. C:\> choco install iisgeolocate

    Package testing. See package page for more details. [DEPRECIATED] iisGeolocate 1.4.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  13. C:\> choco install jumplistexplorer

    Package testing. See package page for more details. [DEPRECIATED] JumpList Explorer 0.8.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  14. C:\> choco install xwfim

    Package testing. See package page for more details. [DEPRECIATED] XWFIM 1.9.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  15. C:\> choco install bstrings

    Package testing. See package page for more details. [DEPRECIATED] bstrings 1.4.1.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  16. C:\> choco install timeapp

    Package testing. See package page for more details. [DEPRECIATED] TimeApp 1.3.2.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  17. C:\> choco install radare

    Package testing. See package page for more details. radare (Install) 3.1.0

    By:

    Radare is a portable reversing framework that can... * Disassemble (and assemble for) many different architectures * Debug with local native and remote debuggers (gdb, rap, webui, r2pipe, winedbg, windbg) * Run on Linux, *BSD, Windows, OSX, Android, iOS, Solaris and Haiku * Perform forensics on filesystems and data carving * Be scripted in Python, ... More information

  18. C:\> choco install hasher-erz

    Package testing. See package page for more details. [DEPRECIATED] Hasher 1.9.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  19. C:\> choco install mftecmd

    Package testing. See package page for more details. [DEPRECIATED] MFTECmd 0.4.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  20. C:\> choco install sleuthkit

    Package testing. See package page for more details. sleuthkit 4.4.0

    By:

    The Sleuth Kit: Forensics Tools

  21. C:\> choco install sdbexplorer

    Package testing. See package page for more details. [DEPRECIATED] SDB Explorer 0.6.0.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  22. C:\> choco install volatility

    Package testing. See package page for more details. Volatility Framework - Standalone 2.6.0.20190425

    By:

    The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer visibilty into the runtime state of the s... More information

  23. C:\> choco install vscmount

    Package testing. See package page for more details. [DEPRECIATED] VSCMount 0.5.2.1

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  24. C:\> choco install rbcmd

    Package testing. See package page for more details. [DEPRECIATED] RBCmd 0.3.0.3

    By:

    Choco package discontinued. Use Get-ZimmermanTools.ps1 going forward

  25. C:\> choco install netfoxdetective

    Package testing. See package page for more details. NetfoxDetective 0.9.1

    By:

    NFX Detective is a novel Network forensic analysis tool that implements methods for extraction of application content from communication using supported protocols.