Featured work

1. kacos2000/WindowsTimeline

   Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)

   PowerShell 195
2. kacos2000/Win10

   Win 10/11 related research

   PowerShell 192
3. kacos2000/MFT_Browser

   $MFT directory tree reconstruction & FILE record info

   PowerShell 313
4. kacos2000/Prefetch-Browser

   Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's

   PowerShell 62
5. kacos2000/Queries

   SQLite queries

   PowerShell 85
6. kacos2000/WinHex_Templates

   X-Ways Forensic/ WinHex templates

   Smarty 50