This tool can parse normal records and recover deleted records in Windows.edb, used in Windows Search. WinSearchDBAnalyzer can extract and analyze Windows.edb from live systems, showing more information than other tools, such as file categorization by extension, file hierarchy, and file contents. It can recover deleted records, works well on Windows 10, and can apply to UTC time, revealing data like Outlook Mail, OneNote, Internet History, Lnk list, Network Drive, Favorites, File and Folder Information, and Activity History.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A library and tools to access and manipulate VMware Virtual Disk (VMDK) files.
A command-line tool for creating hex dumps, converting between binary and human-readable representations, and patching binary files.
Tool for live forensics acquisition on Windows systems, collecting artefacts for early compromise detection.
An open source digital forensic tool for processing and analyzing digital evidence with high performance and multiplatform support.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.