analyzing-prefetch-files-for-execution-history
CommunityUncover Windows Prefetch execution history.
Data & Analytics#prefetch#incident-response#digital-forensics#execution-history#windows-forensics#timeline-analysis
AuthorAxxxxxxaaann
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Analyzing Prefetch artifacts provides a reliable way to reconstruct program execution history on Windows, including run counts, timestamps, and referenced files, which is essential for incident response and digital investigations.
Core Features & Use Cases
- Parses Windows Prefetch versions 17, 23, 26, and 30 to extract execution metadata.
- Builds a timeline of executable activity and identifies suspicious tool usage.
- Supports cross-reference with other artifacts to establish comprehensive incident narratives.
Quick Start
Run the analysis agent against the Prefetch directory to generate a structured execution history report.
Dependency Matrix
Required Modules
lznt1
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: analyzing-prefetch-files-for-execution-history Download link: https://github.com/Axxxxxxaaann/KAIRI-Skills/archive/main.zip#analyzing-prefetch-files-for-execution-history Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.