ShellBags Explorer

A forensic analysis tool for parsing Windows ShellBags to reconstruct folder access and user navigation activity.

Jan 08, 2026

∙ Paid

ShellBags Explorer is a digital forensics utility developed by Eric Zimmerman for analyzing Windows ShellBag artifacts. ShellBags store information about folders a user has viewed in Windows Explorer…

Continue reading this post for free, courtesy of CyberMaterial.

Or purchase a paid subscription.