SRUDB.dat parser — reads SRUM records from ESE database files.
SRUDB.dat is an ESE (JET Blue) database stored at
C:\Windows\System32\sru\SRUDB.dat. On a live system it is locked;
forensic analysis always operates on a copy.
SRUDB.dat parser — reads SRUM records from ESE database files.
SRUDB.dat is an ESE (JET Blue) database stored at
C:\Windows\System32\sru\SRUDB.dat. On a live system it is locked;
forensic analysis always operates on a copy.