Cortana Search Decoder
This script decodes Cortana search-terms from user-specified IndexedDB.edb files. The script reads these files directly; it does not use the Windows Extensible Storage Engine API.
Note that the script will only read the main database file, not the transaction-log files.
Output is to the console window and bookmarks.
This script was developed for use in EnCase training. For more details, please click the following link:
Download Now