コード例 #1
0
        public static NetworkList[] GetInstances(string volume)
        {
            WindowsVersion version = WindowsVersion.Get(volume);

            if (version.CurrentVersion.CompareTo(new Version("6.0")) >= 0)
            {
                return(GetInstancesByPath(Util.GetVolumeLetter(volume) + @"\Windows\system32\config\SOFTWARE"));
            }
            else
            {
                throw new Exception("The NetworkList key is only available on Windows Vista an newer Operating Systems.");
            }
        }
コード例 #2
0
        public static string[] GetInstances(string volume)
        {
            WindowsVersion version = WindowsVersion.Get(volume);

            if (version.CurrentVersion.CompareTo(new Version("6.1")) == 0)
            {
                return(GetInstancesByPath(Util.GetVolumeLetter(volume) + @"\Windows\AppCompat\Programs\RecentFileCache.bcf"));
            }
            else
            {
                throw new Exception("The RecentFileCache.bcf file is only available on Windows 7 Operating Systems.");
            }
        }
コード例 #3
0
ファイル: Amcache.cs プロジェクト: z4ns4tsu/PowerForensics
        public static Amcache[] GetInstances(string volume)
        {
            WindowsVersion version = WindowsVersion.Get(volume);

            if (version.CurrentVersion.CompareTo(new Version("6.2")) >= 0)
            {
                return(GetInstancesByPath(Util.GetVolumeLetter(volume) + @"\Windows\AppCompat\Programs\Amcache.hve"));
            }
            else
            {
                throw new Exception("The Amcache hive is only available on Windows 8 and newer Operating Systems.");
            }
        }
コード例 #4
0
        public static InternetExplorerHistory[] Get(string volume)
        {
            // Determine Windows Version
            WindowsVersion version = WindowsVersion.Get(volume);

            string HistoryPath = null;

            /*switch (version.CurrentVersion)
             * {
             *  case "5.1":
             *      //% systemdir %\Documents and Settings\% username %\Local Settings\History\history.ie5
             *      break;
             *  case "5.2":
             *      //% systemdir %\Documents and Settings\% username %\Local Settings\History\history.ie5
             *      break;
             *  case "6.0":
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
             *      break;
             *  case "6.1":
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
             *      break;
             *  case "6.2":
             *      //C:\Users\tester\AppData\Local\Microsoft\Windows\WebCache\WebcacheV01.dat
             *      break;
             *  case "6.3":
             *      //C: \Users\tester\AppData\Local\Microsoft\Windows\WebCache\WebcacheV01.dat
             *      break;
             * }*/
            // Iterate through Index.Dat Files


            // Return InternetExplorerHistory Objects
            return(null);
        }
コード例 #5
0
 public static WindowsVersion Get()
 {
     return(WindowsVersion.Get(@"C:\Windows\system32\config\SOFTWARE"));
 }