2018년 10월 30일 화요일

WinSearchDBAnalyzer

WinSearchDBAnalyzer


  This tool can parse normal records and recover deleted records in Windows.edb.

  Windows.edb is used in Windows Search.


Download Program (Free)



(Version : 1.0.0.6 Updated, Feb 12, 2020)

(MD5 : 04F236BC295EA2862E3D16A88037DB5E)



WinSearchDBAnalyzer Advantages :

 - WinSearchDBAnalyzer can recovery deleted records.

 - WinSearchDBAnalyzer works well on Windows 10.

 - WinSearchDBAnalyzer can extract and analyze Windows.edb from live system.

 - Regardless of status of the file, WinSearchDBAnalyzer can parse any file. (Dirty status is OK)

 - WinSearchDBAnalyzer shows more information than the other tools . 
   (File categorization by extension, File hierarchy, File Contents)

 - WinSearchDBAnalyzer can apply to UTC time.


What data exists in Windows.edb? :

 - Outlook Mail Data (Time ,Contents)

 - OneNote Title

 - Internet History (URLs, Last visit time)

 - Lnk list

 - Network Drive (When adding offline)

 - Favorites

 - File, Folder Information (Time, Contents(2KB), Path,...)

 - Activity History  (Recently used programs, Windows 10 Timeline)

Tips :

 - If you want to see URLs that users visited, Search for: "http://" or "https://"

 - If you want to see internet queries, Search for: "q=" or "query="

 - If you want to see the record for a certain time, Search for: "2018-11-"

 - If you want to see all the records, just select "ALL"

 - When recovering deleted records, be sure to check "Unknown"