Windows recycle bin analysis tool

Recycle Bin full icon

Rifiuti2 analyse recycle bin files from Windows. Analysis of Windows recycle bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the deleted files have been moved out from the recycle bin since they are trashed.

It is a rewrite of rifiuti, which is originally written by FoundStone folks for identical purpose. Then it was extended to cover more functionalities, such as:

Latest features and bug fixes are listed here.

Download and Usage

Please click on blue “Download on Github” link on top right corner of this website to download and use rifiuti2.

Rifiuti2 is designed to be portable, and runs on command line environment. Two programs rifiuti and rifiuti-vista are chosen depending on relevant Windows recycle bin format.

Please consult manpage (Unix) or README.html (bundled with Windows binaries) for complete options and detailed usage description. There are some usage samples on Github page as well.

Tab-separated list sample

XML sample