Rifiuiti and Rifiuiti2

Rifiuiti and Rifiuiti2

Rifiuiti and Rifiuiti2 is a tool to examine the info2 files found in the ms windows recycle bins. The info2 file gives meta informations about the files found in the recycle bin. Rifiuti2 is a rewrite of rifiuti, a tool for analyzing windows recycle bin info2 file.Analysis of windows recycle bin is usually carried out during windows computer forensics. rifiuti2 can extract file deletion time, original path and size of deleted files and whether the deleted files have been moved out from the recycle bin since they are trashed. it supports the info2 file format found in windows up to window xp as well as the new file format found in vista.

Usage

Syntax

 rifiuti [options] <filename>

Options

-d Field Delimiter (TAB by default)

Rifiuiti2

Rifiuti2 is a rewrite of rifiuti, a tool for analyzing windows recycle bin info2 file.Analysis of windows recycle bin is usually carried out during windows computer forensics. rifiuti2 can extract file deletion time, original path and size of deleted files and whether the deleted files have been moved out from the recycle bin since they are trashed. it supports the info2 file format found in windows up to window xp as well as the new file format found in vista.

Usage

Syntax

rifiuti2 [OPTION...] FILE

Options

Help Options:
  -h, --help                 Show help options
  --help-all                 Show all help options
  --help-text                Show plain text output options

Plain text output options:
  -t, --delimiter=STRING     String to use as delimiter (TAB by default)
  -n, --no-heading           Don't show header
  -l, --legacy-filename      Show legacy filename instead of unicode
  -8, --always-utf8          Always show file names in UTF-8 encoding

Application Options:
  -o, --output=FILE          Write output to FILE
  -x, --xml                  Output in XML format (-t, -n, -l, -8 options will have no effect)
  --from-encoding=ENC        The assumed file name character set when no unicode file name is present in INFO2 record (mandatory if INFO2 file is created by Win98, useless otherwise)
0 Comments

Leave a reply

CONTACT US

We're are building as a community and a team. Be a part of it.

Sending

©2017 Ztrela Knowledge Solutions Pvt. Ltd

Log in with your credentials

Forgot your details?