Parses the prefetch, verifies digital signatures on the main path and imports, uses YARA Rules, also analyzes service time and bypasses like file deletion using UsnJrnl
☆23May 28, 2026Updated last month
Alternatives and similar repositories for PrefetchView
Users that are interested in PrefetchView are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses the BAM forensic artifact, converts \device\ paths to a drive letter, verifies digital signatures, checks replaces using UsnJrnl, …☆21May 28, 2026Updated last month
- blablabla☆20Jun 13, 2026Updated last month
- Detects fileless using powershell event logs and has an option to analyze RAM, to detect possible pe injects, shellcode, etc.☆19Apr 2, 2026Updated 3 months ago
- dumps DPS memory and filters into multiple output files☆17Mar 19, 2026Updated 4 months ago
- Parse the jar prefetch files, look at the DcoumLaunch strings, checker deleted/renamed pfs files and flags☆16Nov 7, 2025Updated 8 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Accesses C:\$Extend\$UsnJrnl:$J, reads its creation timestamp, and compares it against the system boot time, if the $UsnJrnl creation tim…☆16Jan 14, 2026Updated 6 months ago
- Parses NTFS journal entries☆15Jan 20, 2025Updated last year
- Parses info about paths on a .txt it will ask to be provided, covering digital signatures, yara rules and replaces.☆17May 28, 2025Updated last year
- parses the BAM forensic artefact, showing digital signatures, last executed time, converted path according to harddiskvolume and generic …☆30Jun 3, 2025Updated last year
- Gets the execution of files using the activitiescache.db artifact using sqlite3, checks the files' digital signatures, and applies severa…☆11May 12, 2025Updated last year
- parses windows prefetch files, analyzing digital signatures, and also generics, with lots of features.☆13May 12, 2025Updated last year
- game optimizer that needs a remake☆15Apr 9, 2026Updated 3 months ago
- C++ Extended Template Library☆16Jun 15, 2026Updated last month
- Reworked regedit including several new features & miscellaneous registry details.☆37Jun 25, 2026Updated 3 weeks ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 基于python的bilibili网页登录二维码输出到控制台的小工具☆14Dec 22, 2023Updated 2 years ago
- Question generation and solution☆17Updated this week
- Scheduled Autoclicker based on Android Accessibility service,Support NTP Time Sync☆20Updated this week
- Source code for each episode of my Minecraft JNI tutorial series☆17Jun 26, 2023Updated 3 years ago
- ☆40Sep 26, 2025Updated 9 months ago
- Process path modification x64☆59Jul 18, 2018Updated 8 years ago
- Parses amcache.hve files, but with a twist!☆156Jun 17, 2026Updated last month
- A Chrome extension that automatically completes all Discord Quests☆136Apr 25, 2026Updated 2 months ago
- Use ci.dll API for validating Authenticode signature of files☆169Mar 28, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 通过System令牌获取UIAccess☆164Jan 7, 2023Updated 3 years ago
- C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL☆194Updated this week
- 内核驱动加载/卸载痕迹清理,努力绕过反作弊吧 PiDDBCacheTable and MmLastUnloadedDriver☆190Feb 11, 2023Updated 3 years ago
- Way to inject jar files into java process through a dll.☆183May 25, 2020Updated 6 years ago
- Radical Windows ARK☆254Apr 18, 2025Updated last year
- Bypass UAC at any level by abusing the Program Compatibility Assistant with RPC, WDI, and more Windows components☆287Aug 4, 2021Updated 4 years ago
- 内核级别隐藏指定窗口☆322Feb 9, 2022Updated 4 years ago
- Hide Driver By MiProcessLoaderEntry☆291May 17, 2019Updated 7 years ago
- Controlling Windows PP(L)s☆401Jun 9, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Make your games and apps run on the right CPU cores - for smoother performance on AMD Dual-CCD and Intel Hybrid processors.☆701May 14, 2026Updated 2 months ago
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,441Nov 16, 2023Updated 2 years ago
- SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技…☆1,033Nov 10, 2021Updated 4 years ago
- Protected Processes Light Killer☆1,004Mar 24, 2023Updated 3 years ago
- Access without a real handle☆1,049Apr 10, 2021Updated 5 years ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,303Apr 2, 2026Updated 3 months ago
- B站API收集整理及开发，不再维护☆1,355Jun 19, 2022Updated 4 years ago