Windows File Analyzer – Forensic File Analysis Tool

Windows File Analyzer is a tool to decode and analyze some special files used by Windows Operating System. In these files user will find some interesting information related to forensic analysis and Incident response. Every analysis results can be printed in user-friendly form.

Windows File Analyzer - Forensic File Analysis Tool
Windows File Analyzer – Forensic File Analysis Tool

The list of analyzer include the following analyzers:

  • Windows XP Thumbnail Database Analyzer
    This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
  • ACDSee Thumbnail Database Analyzer
    This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
  • Google Picasa Thumbnail Database Analyzer
    This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
  • FastStone Viewer Thumbnail Database Analyzer
    This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
  • HP Digital Imaging Thumbnail Database Analyzer
    This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
  • Prefetch Analyzer
    It reads files stored usually in Prefetch folder and diggs out stored informaton.
  • Shortcut Analyzer
    This tool reads all shortcut files in specified folder and displays data stored in them.
  • Index.DAT Analyzer
    This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
  • Recycle Bin Analyzer
    This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.

You can read more and download this tool over here: http://www.mitec.cz/wfa.html

Share