rifiuti

Rifiuti is a specialized tool for analyzing the INFO2 files found in the MS Windows recycle bin. These INFO2 files contain metadata about files that have been deleted and moved to the recycle bin, such as original paths, deletion dates, and file sizes.

The tool is particularly valuable in digital forensics investigations where recovering information about deleted files is crucial. Investigators can use Rifiuti to extract this metadata, helping to reconstruct user activity and identify potentially relevant evidence that might otherwise be overlooked.

By parsing the binary format of INFO2 files, Rifiuti presents the data in a readable format, facilitating analysis without manual decoding.

Rifiuti reads and parses the binary INFO2 file format used by MS Windows recycle bins to store metadata about deleted files. It extracts fields such as file names, original locations, deletion timestamps, and sizes, outputting them in a delimited text format for analysis.