-
OtherStuff Public
Various Topics
-
Prefetch-Browser Public
Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
-
MFT_Browser Public
$MFT directory tree reconstruction & FILE record info
-
Jumplist-Browser Public
Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
-
MFT_dataruns Public
Dataruns calc
-
Win10 Public
Win 10/11 related research
-
Evtx_Log_Browser Public
Evtx Log (xml) Browser
-
Queries Public
SQLite queries
-
WinEDB Public
Windows.EDB Browser
-
WindowsTimeline Public
Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
-
MFT_Record_Viewer Public
$MFT Record Viewer
-
-
MS-Office-ooxml-file-parser Public
MS Office ooxml file metadata parser
-
WinHex_Templates Public
X-Ways Forensic/ WinHex templates
{{ message }}