RBCmd

A Recycle Bin artifact (INFO2/$I) parser.

By Eric Zimmerman