Psmths/windows-forensic-artifacts

windows-forensic-artifacts

✅ Recently maintained

Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!

506Stars
60Forks
+17-day stars

— · MIT · Last push 2026-11-02

Official repository & installation ↗

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-05499
2026-10-06499
2026-10-07499
2026-10-08499
2026-10-09499
2026-10-10500
2026-10-11502
2026-10-12502
2026-10-13502
2026-10-14502
2026-10-15502
2026-10-16502
2026-10-17502
2026-10-18503
2026-10-19503
2026-10-20504
2026-10-21505
2026-10-22505
2026-10-23505
2026-10-24505
2026-10-25505
2026-10-26505
2026-10-27505
2026-10-28506
2026-10-29506
2026-10-30506
2026-10-31506
2026-11-01506
2026-11-02506
2026-11-03506

Get the project

git clone https://github.com/Psmths/windows-forensic-artifacts.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.