https://github.com/ognjenkatic/windows-forensics-uf

A user friendly app for retrieving and consolidating windows system information
https://github.com/ognjenkatic/windows-forensics-uf

forensics windows wpf-application

Last synced: about 1 year ago
JSON representation

A user friendly app for retrieving and consolidating windows system information

• Host: GitHub
• URL: https://github.com/ognjenkatic/windows-forensics-uf
• Owner: ognjenkatic
• License: mit
• Created: 2018-11-11T14:30:17.000Z (over 7 years ago)
• Default Branch: main
• Last Pushed: 2024-04-01T07:27:51.000Z (over 2 years ago)
• Last Synced: 2025-05-07T03:15:10.330Z (about 1 year ago)
• Topics: forensics, windows, wpf-application
• Language: C#
• Homepage:
• Size: 460 KB
• Stars: 3
• Watchers: 0
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# windows-forensics-uf

A user friendly application for retrieving and consolidating information about your computer system.

![alt text](https://github.com/ognjenkatic/windows-forensics-uf/blob/master/screen.png?raw=true)

The application is targeted towards beginner level administrators but could be useful to anyone in need of a quick and easy tool for basic computer forensic tasks on a windows operating system.

The current version of the application provides information about the following:

* Routing table

* Network adapters

* Operating system

* BIOS

* Memory and CPU

* Disk 

* Users and user groups

* Shares

* Account usage sessions

* Computer usage sessions

* WLAN sessions

* Environment variables

* Recently opened files and commands ran

* Startup programs

* Installed programs

* Updates

* ARP Table

* Processes and connections

* Services

* USB Device History

* Prefetch 

* SRUM application usage

* SRUM network usage

* Shim Cache

* User Assist

* BAM information