-
Notifications
You must be signed in to change notification settings - Fork 12
User Guide
pjrinaldi edited this page Dec 10, 2020
·
2 revisions
Once you launch Wombat Forensics, the first thing you should do go into the settings and setup your options.
Step by step here with pictures...
After configuring your settings, you should launch the "Viewer Manager" and add some viewers to open different artifacts. Currently, there are 7 built-in viewers: file hex, plain text, html, images, videos, PDF, WindowsNT registry files; so adding others may be helpful. There are also custom viewers for certain artifacts such as INFO2, $I30, $I recycle bin files, Shortcut Link Files (LNK), Prefetch (PF), Zip Archives (zip).
Step by step here with pictures...