Bundled tools¶
RECON curates a set of free, portable tools and fetches each from its official source. The
manifest (winpe/menu/tool-sources.json) records where each comes from; Get-ToolRuntime.ps1 can
pull a tool on demand over WinPE networking into X:\Tools\<id>.
Tools with a direct download link are fetched automatically. A few are marked manual because their site hides the download behind a bot-blocking/interstitial page or ships installer-only — for those, RECON points you at the page and you drop the executable into place.
| Tool | Purpose | Source |
|---|---|---|
| Explorer++ | Portable file manager | auto |
| Q-Dir | Multi-pane file manager | auto |
| Autoruns (Sysinternals) | What runs at startup | auto |
| BleachBit | Junk / free-space cleanup | auto |
| ClamAV | Offline malware scanning | auto (needs virus definitions staged) |
| NTPWEdit | Offline local password reset | auto — pinned, verified copy (see below) |
| CrystalDiskInfo | Drive SMART health | manual |
| FastCopy | Checksum-verified copies (optional) | manual |
| TeraCopy | Verified copies (optional) | manual |
You don't need the manual copiers
Save files and Copy to backup already work with Windows' built-in robocopy. Add FastCopy or TeraCopy only if you specifically want checksum-verified copies.
NTPWEdit is treated as a supply-chain risk¶
NTPWEdit edits the Windows SAM, so a tampered build would be dangerous. RECON pins it to a verified copy of the genuine official release — an Internet Archive snapshot of NTPWEdit 0.7 (GPL), SHA-1 verified and identical across snapshots — rather than any random re-host. The Reset a password action also backs up the SAM before touching it. See the Safety model.
Licensing¶
Every bundled tool is free and used within its license; RECON stages each from its official source rather than redistributing it in bulk. RECON does not include any proprietary or paid software.