A command‑line utility that extracts windows forensic artefact from DFIR-ORC archives (https://github.com/DFIR-ORC/dfir-orc) - View it on GitHub