Windows forensics Engine
-
Updated
Sep 6, 2026 - Python
Windows forensics Engine
Forensic-grade Windows privacy cleaner. Erases temp files, browser caches, MRU histories, Shellbags, registry artifacts, network traces & more — scan first, deselect what you keep, then delete. Undo snapshots, secure wipe, UAC elevation. Built with Tauri 2 + Rust.
Correlating Windows 11 forensic artefacts (Prefetch, Event Logs, ShellBags) to reconstruct user activity. MSc Cyber Security & Forensics dissertation, University of Westminster
Cross-platform, open-source shellbag parser, modified for python3
To associate your repository with the shellbags topic, visit your repo's landing page and select "manage topics."