go-prefetch icon indicating copy to clipboard operation
go-prefetch copied to clipboard

Published 20 hours ago • verified publisher icon Velocidex
→

Metadata

A golang implementation of a prefetch parser.

Results 1 go-prefetch issues
Sort by recently updated
recently updated
newest added

Prefetch paths refer to volumes in volume information

Parsed paths are similar to "\VOLUME{01d6e0a7ee241dde-14ee8142}\WINDOWS\SYSTEM32\KERNEL32.DLL" where it is not clear where the volume is - might it be in the Volume information section? https://github.com/libyal/libscca/blob/main/documentation/Windows%20Prefetch%20File%20(PF)%20format.asciidoc#46-volumes-information

scudette avatar scudette

← Metadata

18
Stars
3
Forks
Watchers

Owner

verified publisher icon Velocidex

Metadata

A golang implementation of a prefetch parser.

Back