windows_artifacts

type AppCompatCacheEntry struct {
	LastWriteTime string `json:"last_write_time"`
	FilePath      string `json:"file_path"`
	Id            int    `json:"id"`
}

type EvtxProcessor struct {
	processors.Default
}

type LnkProcessor struct {
}

type PrefetchEntry struct {
	Executable    string      `json:"ExecutableName"`
	FileSize      uint32      `json:"FileSize"`
	Hash          string      `json:"Hash"`
	Version       string      `json:"Version"`
	LastRunTimes  []time.Time `json:"LastRunTimes"`
	FilesAccessed []string    `json:"FilesAccessed"`
	RunCount      uint32      `json:"RunCount"`
}

type PrefetchProcessor struct {
	processors.Default
}

type PrefetchSingleEntry struct {
	PrefetchUUID  string
	Executable    string
	FileSize      uint32
	Hash          string
	Version       string
	Timestamp     string
	FilesAccessed []string
	RunCount      uint32
}

type RegistryEntry struct {
	LastWriteTime string `json:"last_write_time"`
	Key           string `json:"key"`
	KeyName       string `json:"key_name"`
	Value         string `json:"value"`
	ValueName     string `json:"value_name"`
}

type RegistryProcessor struct {
	processors.Default
}