prefetch
Parse Windows .pf files to extract executable names, run counts, last eight run times, volumes, and referenced files.
Instructions
Parse a Windows Prefetch (.pf) file: executable, run count, last 8 run times, volumes, referenced files.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | ||
| part | No | ||
| image | No | ||
| local_path | No |