PyDetective is a collection of Python command line tools which may come handy in many computer crime investigations.

The toolkit includes:

• del2info - tool for analyzing Windows Recycle Bin INFO2 and $I?????? files
• carver - tool for extracting Thumbnails stored in Windows Explorer thumbcache_NN.db files

More in the near future ...

Awards