Week 3 - jude-lindale/Wiki GitHub Wiki

Windows Artifacts

prefect & superfetch

  • location - c:\Windows\Prefetch
  • file having extension .PF
  • usually one file per application or program
  • used by windows to optimize boot and program setup
  • superfetch database.