ShellBagsView
Analyze Windows folder interaction forensically
Description
ShellBagsView is a specialized tool for digital forensics and system analysis. It deciphers the ShellBags entries within the Windows Registry, which are automatically created to store user interface preferences for folders. The utility presents a comprehensive list including access timestamps, view modes (Details, Icons), and window geometry. This data is crucial for investigators to establish a timeline of user activity or for system administrators to diagnose profile-related problems, offering a straightforward way to access deep system metadata.
Screenshots

Click to view full size
