FACT Forensic Artifacts Collecting Toolkit. # fmount image.dd | ffind | flog Tools fmount fmount.dd fkey ffind flog flog.evtx License Released under the MIT License.