How to do it...

To draft this script we will need to:

  1. Recurse the ProgramData directory to search for the Windows.edb file.
  2. Iterate through discovered Windows.edb files (though there should really only be one) and open the files using the pyesedb library.
  3. Process each of the files to extract key columns and attributes.
  4. Write these key columns and attributes to the report.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.145.151.141