Bulk extractor windows prefetch decoder
Loading...
Authors
Garcia, Luis E.
Subjects
Anti-submarine warfare.
Advisors
Date of Issue
2011-08-26
Date
2011-06-30--2011-08-31.
Publisher
Monterey, California. Naval Postgraduate School
Language
Abstract
scan winprefetch is a C++ and thread-safe Windows prefetch scanner for the bulk extractor framework that decodes prefetch files. The decoder analyzes disk images for Windows prefetch files. At the completion of analyzing each prefetch file found on the disk image, a text file is created containing a XML output detailing all found prefetch files.
Type
Technical Report
Description
Series/Report No
Department
Computer Science
Identifiers
NPS Report Number
NPS-CS-11-008
Sponsors
Funder
Format
Citation
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.