1 talk mention this tool across 1 BSides chapters.
Windows forensic tool that extracts process network and resource usage data from locked system files using volume shadow copies and exports to CSV format