Home

Introduction

Rifiuti2 is for analyzing Recycle Bin files on Windows. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. It can extract:

• file deletion time
• original path and size of deleted files
• whether trashed files have been moved out of recycle bin

For those interested in what it does, and what functionality it provides, please refer to official site.

Rifiuti2 supports reading files from each and every Windows version where recycle bin feature has every existed, ranging from Windows 95 to Windows 11 (or very probably beyond). The command used for analysis depends on the version of Windows producing the recycle bin (NOT the version of user's system).