Tools

Name Description
$I Parse Parse Windows $I files from the Recycle Bin. Read about it here.
evtx-usb Extract USB device connection and disconnect events from DriverFrameworks-UserMode/Operational event log in Windows 7. Read about it here.
acdCacheParse Parse browser cache files for records related to Amazon Cloud drive. Read about it here.
acdLogParse Parse Amazon Cloud Drive log file. Read about it here.
usbmsc.pl Extract records of USB devices connected to OS X system from kernel.log. Read about it here.
VSC Toolset Toolset for working with volume shadow copies. Read about it here.