Skip to content

PrefetchBrowser

Compare
Choose a tag to compare
@kacos2000 kacos2000 released this 05 Dec 17:14
· 19 commits to master since this release
696c7a4

[Update]

  • Now lists & reads Prefetch (.pf) files hidden in Alternate Data Streams
    e.g. : 'WELCOME2.TXT:REVSHELL.EXE-41B5A636.pf'

Ref: # Creating a Hidden Prefetch File to Bypass Normal Forensic Analysis