This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in user-friendly form. It's designed in Multiple Document Interface.



This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in user-friendly form. It's designed in Multiple Document Interface.
Here are described individual analyzers:
Windows XP Thumbnail Database Analyzer
This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
ACDSee Thumbnail Database Analyzer
This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
Google Picasa Thumbnail Database Analyzer
This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
FastStone Viewer Thumbnail Database Analyzer
This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
HP Digital Imaging Thumbnail Database Analyzer
This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
Prefetch Analyzer
It reads files stored usually in Prefetch folder and diggs out stored informaton.
Shortcut Analyzer
This tool reads all shortcut files in specified folder and displays data stored in them.
Index.DAT Analyzer
This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
Recycle Bin Analyzer
This analyzer decodes and displays Info2 files that hold recycle bin content information.
Here you can download WFA Guidance by Allan S. Hay

Target platforms:
Windows 2000
Windows XP
Windows 2003
Windows Vista
Windows 7
Windows Server 2008
Windows Server 2008 R2

HomePage:

N/A