Windows-Prefetch-Parser

Windows-Prefetch-Parser copied to clipboard

Reorder the column headers for the CSV output to match the order of data

DB-37

``` C:\Users\user\PythonProjects\Windows-Prefetch-Parser\windowsprefetch>python prefetch.py -f C:\Users\user\cases\prefetch\VERACRYPT.EXE-047EFDD6.pf File "C:\Users\user\PythonProjects\Windows-Prefetch-Parser\windowsprefetch\prefetch.py", line 354 print "\n{0}\n{1}\n{0}\n".format(banner, ntpath.basename(self.pFileName)) ^ SyntaxError: invalid syntax ```

ditlef9

Complains that I need Windows 8+ on a system which was upgrade from 7 to 8 to 10 Enterprise

4

I'm running it in Cygwin.

smclinden

> [ - ] 'module' object has no attribute 'windll' > [ - ] Windows 8+ required for this script to decompress Win10 Prefetch files

evandrix

Won't parse any of the given *.pf files. Went over the source code several times. Picked up on a few bugs; but still no success. Regards, Frank

FrankKosl

Invalid Syntax

2

Hello, I just installed the windows prefetch parser and did everything like it is explained. But when I run the command I get a syntax error can somebody help me...

Jbha

zeze-zeze