Crate srum_parser 

SRUDB.dat parser — reads SRUM records from ESE database files.

SRUDB.dat is an ESE (JET Blue) database stored at C:\Windows\System32\sru\SRUDB.dat. On a live system it is locked; forensic analysis always operates on a copy.

Enums

SrumError

Errors produced by the SRUM parser.

Functions

parse_app_timeline

Parse application timeline records from a SRUDB.dat file.

parse_app_usage

Parse application usage records from a SRUDB.dat file.

parse_energy_lt

Parse energy usage long-term records from a SRUDB.dat file.

parse_energy_usage

Parse energy usage records from a SRUDB.dat file.

parse_id_map

Parse ID map entries from a SRUDB.dat file.

parse_network_connectivity

Parse network connectivity records from a SRUDB.dat file.

parse_network_usage

Parse network usage records from a SRUDB.dat file.

parse_push_notifications

Parse push notification records from a SRUDB.dat file.