Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
windows clipboard database timeline powershell windows-10 dfir sqlite3 artifacts powershell-script copy-paste powershell-scripts timelines forensic timelineview 1803 april-2018 json1-extension 1809 1903
-
Updated
Feb 16, 2023 - PowerShell