From 7692abc05761a6d2a9b9f69f695bb7628cd249d1 Mon Sep 17 00:00:00 2001 From: Joachim Metz Date: Thu, 8 Feb 2024 03:54:51 +0100 Subject: [PATCH] Changes to Windows Prefetch article (#227) --- docs/windows_prefetch_file_format.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/windows_prefetch_file_format.md b/docs/windows_prefetch_file_format.md index ac87210e7..65ecb5fac 100644 --- a/docs/windows_prefetch_file_format.md +++ b/docs/windows_prefetch_file_format.md @@ -436,3 +436,5 @@ been seen. It is currently assumed that this is unused remnant data. * [Windows Prefetch File (PF) format](https://github.com/libyal/libscca/blob/main/documentation/Windows%20Prefetch%20File%20(PF)%20format.asciidoc), by the libssca project +* [Windows Prefetch: Tech Details of New Research in Section A & B](https://4n6ir.com/2017/03/28/windows-prefetch-tech-details-of-new-research-in-section-a-b.html), + by James Habben, March 28, 2017