windows-timeline

Windows Timeline & Project Rome Web Extension

A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)

Parses Windows Timeline data to extract user behavior analytics.