Bulk Extractor Windows Prefetch Decoder

Abstract

scan winprefetch is a C++ and thread-safe Windows prefetch scanner for the bulk extractor framework that decodes prefetch files. The decoder analyzes disk images for Windows prefetch files. At the completion of analyzing each prefetch file found on the disk image, a text file is created containing a XML output detailing all found prefetch files.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Aug 26, 2011
Accession Number
ADA548851

Entities

People

  • Luis E. Garcia Ii

Organizations

  • Naval Postgraduate School

Tags

Communities of Interest

  • Materials and Manufacturing Processes

DTIC Thesaurus Topics

  • Abstracts
  • Artifacts
  • Coding
  • Computational Forensics
  • Computer Programming
  • Computer Science
  • Computers
  • Data Analysis
  • Decoders
  • Decoding
  • Department Of Defense
  • Directories
  • Information Operations
  • Operating Systems
  • Robotics
  • Scanners

Fields of Study

  • Computer science

Readers

  • Computer Science/Computer Engineering/Data Science/Digital Signal Processing.
  • Database Systems and Applications
  • Parasitology and Pharmacology of Malaria.