rifiuti2

Inspired by Rifiuti, rifiuti2 is a command-line tool you can use to analyze Recycle Bin files. It reads the deletion time, original path and size of a deleted file, and lets you know if it was ever restored from the trash bin. Under normal circumstances, this operation is automatically carried out by the operating system in forensic tasks.
It offers support for various types of Recycle Bin formats since Windows Vista until Windows 10, older OS editions such as 95, NT4 and ME since 0.7.0, 32-bit and 64-bit architecture types, along with all localized versions of the operating system, including those based in Unicode (newer) and ANSI (legacy). Information is saved in XML and tab-delimited CSV format.
The usage is rifiuti.exe [OPTION...] INFO2, where INFO2 represents the output file with extracted information about the Recycle Bin.
As far as options are concerned, you can change the tab delimiter into a custom string for the CSV file (-t, delimiter=STRING), hide header information (-n, --no-heading), instruct the utility to always show the result in UTF-8 encoded format (-8, --always-utf8), write the output to file(-o, --output=FILE), change the output to XML from CSV (-x, --xml), show the legacy (8.3) file name if available and specify its CODEPAGE (-l, --legacy-filename=CODEPAGE), indicate the present deletion time in the systems time zone, default is UTC (-z, --localtime), as well as print version information and exit (-v, --version).