Even in 2023 Dexray seems to be delivering value to DFIR practitioners. I am always very humbled by unsolicited additions to Dexray code, because it means the tool is still alive, despite being written in perl, and the security landscape changing so much that AV quarantined files are not as important as they used to be 10 years ago.

Today’s addition covers Kaspersky Server Files quarantined files, courtesy of RevD17. Thank you.

Download the latest version here.