"This script will parse the RecentDocs key and its subkeys in a NTUSER.dat file. It will output the list of filenames in order with the associated timestamps. See Dan's (@4n6k) blog post for background. Usage is simple. Only the -f option is required to specify the NTUSER.dat file of interest. If no other option is used, output will be to the console. If the -o option is used, the output will be written to the file specified." github.com/raptIRJuan/RecentDocsMRU raptir.com/2016/06/recentdocs-python-script.html
↧