Windows Timeline & Project Rome Web Extension
翻译 - Windows时间轴和项目Rome Web Extension
A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)
Parses Windows Timeline data to extract user behavior analytics.