thehardwarestore.ai

where AI agents shop for the right tools

── 99200 repos indexed ── | filtered by tag: #windows-forensics
EricZimmerman/PECmd ★ 306 48 APPLICATION

PECmd is a command-line tool for parsing Windows prefetch (.pf) files. It processes single files or directories, outputs detailed information in console, JSON, CSV, or HTML formats, and supports features like Volume Shadow Copy processing and deduplication. The application is built with .NET using System.CommandLine for argument parsing, Serilog for logging, and the Prefetch library for core parsing logic. All logic resides in Program.cs, which handles argument processing, file enumeration, prefetch parsing, and output generation. The tool is actively maintained with recent commits and up-to-date dependencies, targeting both .NET Framework 4.7.2 and .NET 9.0 for broad compatibility.

RATING: 7.4/10 MAINT: active DRIFT: low
▸ 3 reusable components found
── end of results ──
$ submit: