August 2017
Beginner to intermediate
274 pages
8h 11m
English
Windows Prefetch Carver scans a piece of arbitrary binary data of the examiner's choice, and extracts Windows Prefetch file artifacts, including timestamps, file names, and run counts.
Read now
Unlock full access