Parses the RecentDocs registry key for a supplied NTUSER.dat.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README.md
mru_parse.py

README.md

RecentDocs-MRU-Parser

python mru_parse.py path_to_ntuser.dat

Outputs to CSV in working directory (recent_docs.csv)

For best view - format CSV 'TIMESTAMP' column to "mm:dd:yy hh:mm:ss"