kacos2000

Costas Katsavounidis's repositories

$MFT directory tree reconstruction & FILE record info

Language:PowerShellMIT311 120

Win 10/11 related research

Language:PowerShellMPL-2.0192 22 3

Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)

Language:PowerShellMPL-2.0191 12 2

SQLite queries

Language:PowerShellNOASSERTION85 80

Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's

Language:PowerShellMIT61 2 1

Evtx Log (xml) Browser

Language:PowerShellMIT56 60

Windows.EDB Browser

Language:PowerShellMIT56 50

X-Ways Forensic/ WinHex templates

Language:SmartyGPL-3.047 3 1

Windows 10 Live Information viewer

Language:PowerShell36 4 1

Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser

Language:PowerShellGPL-2.032 20

$MFT Record Viewer

Language:PowerShellGPL-2.022 10

Various Topics

Language:PowerShellMPL-2.015 20

MS Office ooxml file metadata parser

Language:PowerShell7 10

Dataruns calc

Language:PowerShellMIT6 20