Пример #1
0
        /// <summary>
        ///
        /// </summary>
        /// <param name="volume"></param>
        /// <returns></returns>
        public static Amcache[] GetInstances(string volume)
        {
            Helper.getVolumeName(ref volume);

            WindowsVersion version = WindowsVersion.Get(volume);

            if (version.CurrentVersion.CompareTo(new Version("6.2")) >= 0)
            {
                return(GetInstancesByPath(Helper.GetVolumeLetter(volume) + @"\Windows\AppCompat\Programs\Amcache.hve"));
            }
            else
            {
                throw new Exception("The Amcache hive is only available on Windows 8 and newer Operating Systems.");
            }
        }
Пример #2
0
        public static string[] GetInstances(string volume)
        {
            Helper.getVolumeName(ref volume);

            WindowsVersion version = WindowsVersion.Get(volume);

            if (version.CurrentVersion.CompareTo(new Version("6.1")) == 0)
            {
                return(GetInstancesByPath(Helper.GetVolumeLetter(volume) + @"\Windows\AppCompat\Programs\RecentFileCache.bcf"));
            }
            else
            {
                throw new Exception("The RecentFileCache.bcf file is only available on Windows 7 Operating Systems.");
            }
        }
        public static InternetExplorerHistory[] Get(string volume)
        {
            // Determine Windows Version
            WindowsVersion version = WindowsVersion.Get(volume);

            string HistoryPath = null;

            /*switch (version.CurrentVersion)
             * {
             *  case "5.1":
             *      //% systemdir %\Documents and Settings\% username %\Local Settings\History\history.ie5
             *      break;
             *  case "5.2":
             *      //% systemdir %\Documents and Settings\% username %\Local Settings\History\history.ie5
             *      break;
             *  case "6.0":
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
             *      break;
             *  case "6.1":
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\
             *      //% systemdir % \Users\% username %\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
             *      break;
             *  case "6.2":
             *      //C:\Users\tester\AppData\Local\Microsoft\Windows\WebCache\WebcacheV01.dat
             *      break;
             *  case "6.3":
             *      //C: \Users\tester\AppData\Local\Microsoft\Windows\WebCache\WebcacheV01.dat
             *      break;
             * }*/
            // Iterate through Index.Dat Files


            // Return InternetExplorerHistory Objects
            return(null);
        }
 public static WindowsVersion Get()
 {
     return(WindowsVersion.Get(@"C:\Windows\system32\config\SOFTWARE"));
 }
Пример #5
0
 /// <summary>
 ///
 /// </summary>
 /// <param name="volume"></param>
 /// <returns></returns>
 public static WindowsVersion Get(string volume)
 {
     Helper.getVolumeName(ref volume);
     return(WindowsVersion.GetByPath(Helper.GetVolumeLetter(volume) + @"\Windows\system32\config\SOFTWARE"));
 }
Пример #6
0
 public static WindowsVersion Get(string volume)
 {
     return(WindowsVersion.GetByPath(Util.GetVolumeLetter(volume) + @"\Windows\system32\config\SOFTWARE"));
 }