Parses the prefetch, verifies digital signatures on the main path and imports, uses YARA Rules, also analyzes service time and bypasses like file deletion using UsnJrnl
☆23Jul 31, 2026Updated last month
Alternatives and similar repositories for PrefetchView
Users that are interested in PrefetchView are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detects fileless using powershell event logs and has an option to analyze RAM, to detect possible pe injects, shellcode, etc.☆21Apr 2, 2026Updated 4 months ago
- dumps DPS memory and filters into multiple output files☆16Mar 19, 2026Updated 5 months ago
- Accesses C:\$Extend\$UsnJrnl:$J, reads its creation timestamp, and compares it against the system boot time, if the $UsnJrnl creation tim…