QuickBooks Forensics Automation
QuickBooks Forensics is a GUI application, but several common tasks can be automated with a command line interface.
The following commands are available:
/log "log file path" - append all log messages to a file. Log file is saved as a Unicode plain text file prefixed with BOM (byte order mark).
/extract "qbb file path" - extract backup content into the '.qbb' file folder.
/export "qbw file path" "table name" - export selected table as 'table.xml' and 'table.xsd' into the '.qbw' file folder.
/fstart "qbw file path" - start Admin-level user password search using current password recovery attacks.
/reset "qbw file path" - set Admin-level user password as 'P1ssword' and save as 'name_unp.qbw'.
/extract, /export and /reset are designed to close application on completion.
QBForensics.exe /log qblog.txt /extract thegrideon.qbb
QBForensics.exe /log qblog.txt /export thegrideon.qbw abmc_notepad