My favorites | Sign in
Project Home Downloads Wiki Issues Source
Project Information
Wiki pages

As its name indicates, rifiuti2 is a rewrite of rifiuti, a great tool from Foundstone folks for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Quoting from original Foundstone page (now purchased by McAfee):

Many computer crime investigations require the reconstruction of a subject's Recycle Bin. Since this analysis technique is executed regularly, we researched the structure of the data found in the Recycle Bin repository files (INFO2 files). Rifiuti, the Italian word meaning "trash", was developed to examine the contents of the INFO2 file in the Recycle Bin. ...... Rifiuti is built to work on multiple platforms and will execute on Windows (through Cygwin), Mac OS X, Linux, and *BSD platforms."

But since rifiuti (last updated 2004) is restricted to English version of Windows (fail to analyze any non-latin character), thus this rewrite. However it does more:

  • Supports Windows file names in any languages
  • Supports Vista and Windows 2008 (no more uses INFO2 file)
  • Enables localization (that is, translatable) by using glib
  • More rigorous error checking
  • Supports output in XML format

Please refer to InstallPackage page on which package to download and install.

Powered by Google Project Hosting