ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Analyzing Program Execution"

From ForensicsWiki
Jump to: navigation, search
(Windows)
(Windows)
Line 23: Line 23:
 
=== Windows ===
 
=== Windows ===
 
* [[Prefetch]]
 
* [[Prefetch]]
* [[SuperFetch]]
 
 
* Program crashes
 
* Program crashes
 +
* [[SuperFetch]]
 
** Minidumps
 
** Minidumps
 
** Windows Error Reporting (WER)
 
** Windows Error Reporting (WER)
* Windows Registry
 
** [[Windows_Registry#Run/RunOnce|Run/RunOnce]]
 
 
* [[Windows Application Compatibility]]
 
* [[Windows Application Compatibility]]
 
* [[Windows Memory Analysis]]
 
* [[Windows Memory Analysis]]
 +
* Windows Registry
 +
** [[Windows Registry#Run/RunOnce|Run/RunOnce keys]]
  
 
== External Links ==
 
== External Links ==

Revision as of 06:35, 8 July 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

This article is intended to give a high-level overview of analyzing program execution on the various operating systems.

Linux

Mac OS X

Windows

See Also

Linux

Mac OS X

Windows

External Links

Windows