Home
Contact
Email
Twitter
LinkedIn
Google+
Code
PowerForensics
Uproot
WMIEvent
Presentations
Forensic Posters
Wednesday, March 5, 2014
Windows 8 Prefetch 101
In preparation for my presentation on the Windows Prefetch this Friday I made this poster to help understand the Prefetch file structure. Let me know what you think!
Find the high resolution version on my imgur
http://imgur.com/riuljsK
No comments:
Post a Comment
Newer Post
Older Post
Home
Subscribe to:
Post Comments (Atom)
Tweets by @jaredcatkinson
Blog Archive
►
2016
(9)
►
August
(1)
►
April
(1)
►
March
(1)
►
February
(6)
►
2015
(4)
►
June
(1)
►
May
(1)
►
April
(1)
►
March
(1)
▼
2014
(2)
►
April
(1)
▼
March
(1)
Windows 8 Prefetch 101
►
2013
(7)
►
November
(1)
►
October
(1)
►
September
(1)
►
August
(1)
►
July
(3)
Labels
DFIR
(9)
Digital Forensics
(4)
Forensic Friday
(5)
Forensics
(2)
GCFA
(1)
Guid Partition Table
(1)
Learn PowerShell
(2)
Master Boot Record
(1)
Monad Manifesto
(1)
On the Forensic Trail
(3)
OSX
(1)
PowerForensics
(12)
PowerShell
(11)
Prefetch
(1)
SANS
(1)
SANS 508 Review
(1)
SANS FOR 508
(1)
Windows 8
(1)
- Invoke-IR - By Jared Atkinson -
No comments:
Post a Comment