サクサク読めて、アプリ限定の機能も多数!
トップへ戻る
掃除・片付け
www.swiftforensics.com
Corey Harell has uploaded an excellent writeup on the working of Windows Application Experience and Compatibility features. Here he explains how process entries/traces show up in locations such as the ShimCache and RecentFileCache.bcf. For forensic/malware analysts, this is a great place to search for recent processes that were run. This post is a logical continuation of Corey's post. In Windows 8
このページを最初にブックマークしてみませんか?
『www.swiftforensics.com』の新着エントリーを見る
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く