recovery.py, given a range of dates, is capable of extracting various information from a Windows system in said time range:
- Installed apps
- Browsing history (from all main browsers)
- Recent files
- Temporal files
- Running processes
The following libraries need to be installed:
- Pandas:
pip install pandas
- Browser-history:
pip install browser-history