Parse $I $Recycle.Bin Files
Parses the original path, logical size, and date-deleted information from $I $Recycle.Bin files.
Such files may be orphaned in certain cases.
Note that the script won't parse deleted-overwritten files due to the risk of encountering corrupt data.
This version supports V2 (Windows 10) $I files.
This script was developed for use in EnCase training. For more details, please click the following link:
Download Now