Parses the RecentDocs registry key for a supplied NTUSER.dat.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.


python path_to_ntuser.dat

Outputs to CSV in working directory (recent_docs.csv)

For best view - format CSV 'TIMESTAMP' column to "mm:dd:yy hh:mm:ss"