ArtifactExtractor is a script that extracts common Windows artifacts from source images and VSCs.
Artifacts in VSCs will be checked (via hash) if they are different from a later VSC/image copy before extraction.
Category: Misc
Category URL: http://www.dfir.training/component/mtree/forensic-utilities-windows/windows-artifacts?Itemid=