Skip to content

Releases: Velocidex/go-prefetch

Release 0.3

22 Jul 10:14
37e4751
Compare
Choose a tag to compare

Bugfix release - uses API to decompress the prefetch file if running under windows. This avoids some edge cases in decompression.

Release 0.2

03 Jul 15:05
0469fa2
Compare
Choose a tag to compare

This release allows decompression of compressed pf files.

Use like this:

prefetch parse *.pf

You can also extract compressed pf files now into SCCA files:

prefetch extract foo.pf > foo.scca

If you prefer to see timestamps in a different timezone, just set the TZ environment variable:

export TZ=Z
prefetch parse *.pf

Release 0.1

03 Jul 05:24
Compare
Choose a tag to compare

First release - includes windows and linux binaries.

Use like this:

prefetch *.pf