SearchTrace Explorer.
SearchTrace Explorer is designed to parse and visualise Windows Search Index databases (windows.db and windows-gather.db).
It enables forensic practitioners and investigators to explore metadata relating to indexed files, system activity, and search gatherer events.
SearchTrace Explorer Features:
- Indexed item browsing for both windows.db and windows-gather.db
- Accurate parent-path reconstruction
- Raw property store extraction
- Evidence bookmarking with notes and selected raw properties
- CSV/JSON export capabilities for reporting or offline review
- Timeline activity graphing
- Dashboard summaries of database contents
Dashboard
Provides at-a-glance statistics:
- Total indexed records
- Database type
- Evidence count
- Date Range
Windows.db Explorer
Primary indexed-file viewer with:
- Search filters (top-level + deep property search)
- Reconstructed file names and paths
- Multiple timestamp columns
- Reordering and resizing of columns
Timeline View
Shows visual activity distribution across timestamps.
Other Features
Item Details View
Allows:
- Bookmarking items
- Adding investigator notes
- Selecting raw PS_All properties
- Persisting items in a .evidence.json file
- Exporting bookmarked-only output
Export View
Exports:
- Current page only
- All filtered results
- Bookmarked-only evidence
Options include:
- CSV / JSON
- Timestamp formats (UTC | Local)
- WorkId-only export
- Include/exclude paths and timestamps
English 
Thai 
Japanese