A forensic triage collector for Windows: reads NTFS raw (locked files, $MFT, $UsnJrnl, hives with their logs) and streams what a signed job names into one zip…
Windows File History catalogs (Catalog1.edb, Catalog2.edb) for forensics: every file and folder backed up, with its path, times, attributes and USN, and the…