Difference between revisions of "Analyzing Program Execution"

From ForensicsWiki
Jump to: navigation, search
(Windows)
(Windows)
Line 23: Line 23:
 
=== Windows ===
 
=== Windows ===
 
* [[Prefetch]]
 
* [[Prefetch]]
* [[SuperFetch]]
 
 
* Program crashes
 
* Program crashes
 +
* [[SuperFetch]]
 
** Minidumps
 
** Minidumps
 
** Windows Error Reporting (WER)
 
** Windows Error Reporting (WER)
* Windows Registry
 
** [[Windows_Registry#Run/RunOnce|Run/RunOnce]]
 
 
* [[Windows Application Compatibility]]
 
* [[Windows Application Compatibility]]
 
* [[Windows Memory Analysis]]
 
* [[Windows Memory Analysis]]
 +
* Windows Registry
 +
** [[Windows Registry#Run/RunOnce|Run/RunOnce keys]]
  
 
== External Links ==
 
== External Links ==

Revision as of 02:35, 8 July 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

This article is intended to give a high-level overview of analyzing program execution on the various operating systems.

Linux

Mac OS X

Windows

See Also

Linux

Mac OS X

Windows

External Links

Windows