Backtrack Forensics: vinetto

Forensics -> Forensic Analysis Tools

Vinetto is a forensics tool to examine Thumbs.db files. These files store the thumbnails of images under Windows, you can extract that and file names with this app. More info here on these files is here:

http://en.wikipedia.org/wiki/Windows_thumbnail_cache

The usage is very simple:

vinetto -o [output directory] [location of the Thumbs.db file]

-H - creates a HTML report of the output

It will create a hidden directory .thumbs and extract all the thumbnails there.

Official website: http://vinetto.sourceforge.net/