2014-12-24

← Older revision

Revision as of 05:36, 24 December 2014

Line 13:

Line 13:

== Supported Formats ==

== Supported Formats ==



The information below is based of version 1.2.0
(development version)

+

The information below is based of version 1.2.0

=== Storage Media Image File Formats ===

=== Storage Media Image File Formats ===



Storage
Medis
Image File Format support is provided by [[dfvfs]].

+

Storage
Media
Image File Format support is provided by [[dfvfs]].

=== Volume System Formats ===

=== Volume System Formats ===

Line 26:

Line 26:

=== File formats ===

=== File formats ===

* [[Apple System Log (ASL)]]

* [[Apple System Log (ASL)]]

+

* Android usage-history (app usage)

* [[Basic Security Module (BSM) file format|Basic Security Module (BSM)]]

* [[Basic Security Module (BSM) file format|Basic Security Module (BSM)]]

* Bencode files

* Bencode files

Line 33:

Line 34:

* Firefox Cache

* Firefox Cache

* [[Java|Java IDX]]

* [[Java|Java IDX]]



* [[Jump Lists]] .customDestinations-ms files
(as of version 1.2.0)

+

* [[Jump Lists]] .customDestinations-ms files

* MacOS-X Application firewall

* MacOS-X Application firewall

* MacOS-X Keychain

* MacOS-X Keychain

Line 41:

Line 42:

* McAfee Anti-Virus Logs

* McAfee Anti-Virus Logs

* Microsoft [[Internet Explorer History File Format]] (also known as MSIE 4 - 9 Cache Files or index.dat) using [[libmsiecf]]

* Microsoft [[Internet Explorer History File Format]] (also known as MSIE 4 - 9 Cache Files or index.dat) using [[libmsiecf]]

+

* Microsoft IIS log files

* [[OLE Compound File]] using [[libolecf]]

* [[OLE Compound File]] using [[libolecf]]

* [[Opera|Opera Browser history]]

* [[Opera|Opera Browser history]]

* OpenXML

* OpenXML

* Pcap files

* Pcap files



* PL SQL cache file

+

* PL SQL cache file
(PL-SQL developer recall files)

* Popularity Contest log

* Popularity Contest log

* [[Property list (plist)|Property list (plist) format]] using [[binplist]]

* [[Property list (plist)|Property list (plist) format]] using [[binplist]]

Line 61:

Line 63:

* [[Windows#Recycle_Bin|Windows Recycle bin]] (INFO2 and $I/$R)

* [[Windows#Recycle_Bin|Windows Recycle bin]] (INFO2 and $I/$R)

* [[Windows NT Registry File (REGF)]] using [[libregf]]

* [[Windows NT Registry File (REGF)]] using [[libregf]]



* [[LNK|Windows Shortcut File (LNK) format]] using [[liblnk]] (shell item support
as of version 1.2.0
)

+

* [[LNK|Windows Shortcut File (LNK) format]] using [[liblnk]] (
including
shell item support)

* [[Windows XML Event Log (EVTX)]] using [[libevtx]]

* [[Windows XML Event Log (EVTX)]] using [[libevtx]]

* Xchat and Xchat scrollback files

* Xchat and Xchat scrollback files

Line 75:

Line 77:

* Document summary information

* Document summary information

* Summary information (top-level only)

* Summary information (top-level only)



* [[Jump Lists]] .automaticDestinations-ms files
(as of version 1.2.0)

+

* [[Jump Lists]] .automaticDestinations-ms files

=== Property list (plist) formats ===

=== Property list (plist) formats ===

Line 95:

Line 97:

* Chrome cookies

* Chrome cookies

* [[Google Chrome|Chrome browsing and downloads history]]

* [[Google Chrome|Chrome browsing and downloads history]]

+

* [[Google Chrome|Chrome Extension activity]]

+

* Firefox cookies

* [[Mozilla Firefox|Firefox browsing and downloads history]]

* [[Mozilla Firefox|Firefox browsing and downloads history]]

* Google Drive

* Google Drive

Line 105:

Line 109:

=== [[Windows Registry]] formats ===

=== [[Windows Registry]] formats ===

* [[Windows Application Compatibility|AppCompatCache]]

* [[Windows Application Compatibility|AppCompatCache]]



* BagMRU (or ShellBags
) (as of version 1.2.0
)

+

* BagMRU (or ShellBags)

* CCleaner

* CCleaner

* Less Frequently Used (LFU)

* Less Frequently Used (LFU)

* MountPoints2

* MountPoints2



* Most Recently Used (MRU) MRUList and MRUListEx (shell item support
as of version 1.2.0
)

+

* Most Recently Used (MRU) MRUList and MRUListEx (
including
shell item support)

* [[Internet Explorer|MSIE Zones]]

* [[Internet Explorer|MSIE Zones]]

* Office MRU

* Office MRU

* Outlook Search

* Outlook Search

* [[Windows Registry#Run/RunOnce|Run and RunOnce keys]]

* [[Windows Registry#Run/RunOnce|Run and RunOnce keys]]

+

* SAM

* Services

* Services



* Task Cache

+

* Shutdown

+

* Task
Scheduler
Cache
(Task Cache)

* Terminal Server MRU

* Terminal Server MRU

* Typed URLS

* Typed URLS

+

* USB

* USBStor

* USBStor

* UserAssist

* UserAssist

Show more