WinSearchDBAnalyzer
This tool can parse normal records and recover deleted records in Windows.edb.
Windows.edb is used in Windows Search.
Download Program (Free)
(Version : 1.0.0.6 Updated, Feb 12, 2020)
(MD5 : 04F236BC295EA2862E3D16A88037DB5E)
Repository: https://github.com/moaistory/winsearchdbanalyzer
WinSearchDBAnalyzer Advantages :
- WinSearchDBAnalyzer can recovery deleted records.
- WinSearchDBAnalyzer works well on Windows 10.
- WinSearchDBAnalyzer can extract and analyze Windows.edb from live system.
- Regardless of status of the file, WinSearchDBAnalyzer can parse any file. (Dirty status is OK)
- WinSearchDBAnalyzer shows more information than the other tools .
(File categorization by extension, File hierarchy, File Contents)
- WinSearchDBAnalyzer can apply to UTC time.
What data exists in Windows.edb? :
- Outlook Mail Data (Time ,Contents)
- OneNote Title
- Internet History (URLs, Last visit time)
- Lnk list
- Network Drive (When adding offline)
- Favorites
- File, Folder Information (Time, Contents(2KB), Path,...)
- Activity History (Recently used programs, Windows 10 Timeline)
Tips :
- If you want to see URLs that users visited, Search for: "http://" or "https://"
- If you want to see internet queries, Search for: "q=" or "query="
- If you want to see the record for a certain time, Search for: "2018-11-"
- If you want to see all the records, just select "ALL"
- When recovering deleted records, be sure to check "Unknown"
DownLoad Link: https://goo.gl/oQqN53
답글삭제Thank you!!
Use "Long Path This very useful if you are having problems
답글삭제in deleting, unlocking, copying and even renaming files, also very easy.
성함이 한글이셔서 한글로 남깁니다. 매우 유용하고 훌륭한 도구네요. 업무에 많은 도움이 되었습니다. 이런걸 업체도 아닌 개인이 만들다니 정말 천재시네요!!! 덕분에 많은 도움이 되었습니다. 행복하세요~~!!
답글삭제안녕하세요. 시간대를 선택하면 다음 화면에서 Microsoft .NET Framework 에러가 발생합니다. 파일 시작 앞으로 파일 포인터를 이동하려고 했습니다.
답글삭제라는 오류가 발생합니다. 해결 방법을 알려주시면 고맙겠습니다.
사용 환경은 Windwos 10 Enterprise 2004 빌드 19041.746 입니다.