kacos2000

Costas Katsavounidis's repositories

$MFT directory tree reconstruction & FILE record info

Language:PowerShellMIT276 130

Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)

Language:PowerShellMPL-2.0169 13 2

Win 10/11 related research

Language:PowerShellMPL-2.0163 22 3

SQLite queries

Language:PowerShellNOASSERTION68 90

Evtx Log (xml) Browser

Language:PowerShellMIT55 80

Windows.EDB Browser

Language:PowerShellMIT49 40

X-Ways Forensic/ WinHex templates

Language:SmartyGPL-3.042 4 1

Browse Windows Prefetch versions: 17,23,26,30v1/2 & some of SuperFetch .7db/.db's

Language:PowerShellMIT40 3 1

Windows 10 Live Information viewer

Language:PowerShell33 5 1

Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser

Language:PowerShellGPL-2.025 20

$MFT Record Viewer

Language:PowerShellGPL-2.020 30

Various Topics

Language:PowerShellMPL-2.015 30

MS Office ooxml file metadata parser

Language:PowerShell7 20

Dataruns calc

Language:PowerShellMIT6 20