Vestigium is a proof of concept implementation of an application  profiling framework.

Vestigium is a proof of concept implementation of an application profiling framework.

Vestigium is a proof of concept implementation of an application profiling framework. The framework automates the detection of file system and Windows Registry entries. All digital artifacts associated with an application are represented and processing automated by using the standardised DFXML, RegXML and APXML forensic data abstractions.

Vestigium

Vestigium

Vestigium requires three inputs:
1) Forensic image
2) Output directory
3) Application Profile XML (APXML) document(s)

USAGE EXAMPLE:

Source : https://github.com/thomaslaurenson