Forensic analysis tools to reconstruct Internet Explorer and user's activity. TotalRecall investigates: MS IE activity, MS IE history, MS IE cookie, MS IE favorites and some user's activity (recent files and folders; not erased temporary files).