Recipe difficulty: Hard

Python version: 2.7

Operating system: Linux

Most modern operating systems maintain an index of files and other data content stored on the system. These indexes allow for more efficient searches across file formats, emails, and other content found on the system's volumes. On Windows, such an index is found in the Windows.edb file. This database is stored in the Extensible Storage Engine (ESE) file format and found within the ProgramData directory. We will leverage another library from the libyal project to parse this file to extract information about the indexed content on the system.