Elcomsoft Quick Triage 2.01.193 Portable
Date: 10 July 2026 | Posted by: voska89
Elcomsoft Quick Triage 2.01.193 Portable Fast Links | 94.8 Mb
Elcomsoft Quick Triage is a digital forensics tool created to quickly collect and examine important evidence from Windows computers and storage media. It is designed for investigators who need an early overview of a system during incident response, field operations, or forensic laboratory analysis.
The software focuses on identifying high-value forensic artefacts that can help determine system usage patterns, user activity, application behavior, and historical events. It analyzes information from Windows components and commonly used applications, allowing investigators to review relevant data without performing a complete forensic examination.
Elcomsoft Quick Triage can process evidence from active systems, user profiles, and mounted disk images. The Portable edition allows the application to be used without a traditional installation process, making it suitable for deployment in different investigation environments where quick access to forensic analysis tools is required.
Key Features:
- Rapid collection and analysis of important Windows forensic artefacts.
- Extraction of browser history, saved credentials, and user activity data.
- Analysis of Windows Event Logs, Prefetch, Shimcache, SRUM, and system activity records.
- Collection of information about connected USB devices, printers, displays, and other hardware.
- Processing of documents, recent files, Recycle Bin data, and user folder contents.
- Support for analysing evidence from email clients and instant messaging applications.
- Extraction of Windows Vault entries, DPAPI-related data, cryptographic keys, certificates, and credential stores.
- Preservation of extracted artefacts with source information and contextual details.
- Search and indexing tools for faster investigation workflows.
- Export selected evidence into CSV format.
Why Choose Elcomsoft Quick Triage:
Elcomsoft Quick Triage is designed for digital investigators who require a fast method to identify important evidence during the initial stages of an investigation. It helps reduce the time required to locate relevant artefacts by focusing on commonly needed system and user activity data.
The software is suitable for forensic specialists, incident response teams, and professionals who need to examine Windows systems, user profiles, or forensic images while maintaining clear evidence organization and traceability.
What's New:
New: Offline decryption support for passwords stored in Chrome and Chromium-based browsers with ABE protection
New: Support for browsers with master passwords (Yandex browser, and all Gecko-based including Firefox)
New: Support for Entra ID and Microsoft Accounts
Workaround: Implemented a workaround for Windows Defender
Workaround: Memory dumps are now temporarily skipped if the Memory Integrity Check is enabled
Improved: The container format, making it much faster, with new indexing
Improved: Data indexing in the Lucene indexing engine (less storage space, faster processing)
Improved: Faster search without the Windows API to skip "offline" files that are not actually synced
Improved: Global search improvements and fixes, alongside smoother progress on data indexing
New: An event viewer for .evtx files with faster search
New: A "data only" source type (when the OS is unknown)
New: Source data mapping in the container
New: Fast export into CSV format
New: Portable version creation
New: An ability to select files or folders to be saved to the container
New: Calculating the disk space needed for project storage
New: Source type information in smart folders
New: All fields now have a type description
New: A "Recent projects" menu
Fixed: Problems with smart folders (improper field names)
System Requirements:
Windows 10, 11
Home Page
https://www.elcomsoft.com/eqt.html
DOWNLOAD LINK
Links are Interchangeable - No Password - Single Extraction
See full article