Prefetch: The Little Snitch That Tells on You

Incident Response and forensic analysts use the contents of prefetch files in investigations to gather information, such as the source from which an executable was launched, how many times it was executed, what files it touched, and the date and time it was launched. A prefetch file is like the little brother that tells the...

The post Prefetch: The Little Snitch That Tells on You appeared first on TrustedSec.

analysts file files forensic incident incident response incident response & forensics information investigations little snitch prefetch response