SRUM
System Resource Usage Monitor (SRUM) Data
- 6 paths
SOFTWARESOFTWARE.LOG*- Version 1
- Mark Hallman
Paths on disk
6 paths
References
13 links
- medium.com/@esmyl/srum-forensics-dfir-aa9522a925c5(opens in new tab)
- medium.com/velociraptor-ir/digging-into-the-system-resource-usage-monitor-srum-afbadb1a375(opens in new tab)
- youtube.com/watch?v=l6-83WU95Sw(opens in new tab)
- youtube.com/watch?v=Uw8n4_o-ETM(opens in new tab)
- digital-forensics.sans.org/summit-archives/file/summit_archive_1492184583.pdf(opens in new tab)
- frsecure.com/blog/windows-forensics-execution/(opens in new tab)
- isc.sans.edu/forums/diary/System+Resource+Utilization+Monitor/21927/(opens in new tab)
- medium.com/velociraptor-ir/digging-into-the-system-resource-usage-monitor-srum-afbadb1a375(opens in new tab)
- coek.info/pdf-forensic-implications-of-system-resource-usage-monitor-srum-data-in-windows-8-.html(opens in new tab)
- digitalforensicsdotblog.wordpress.com/2021/10/06/swimming-in-the-srum/(opens in new tab)
- forensafe.com/blogs/srudb.html(opens in new tab)
- twitter.com/purp1ew0lf/status/1504491533487296517?s=21(opens in new tab)
- github.com/WithSecureLabs/slide-decks/blob/main/2023-SANS_DFIR_Summit_Europe/Exploring_the_depths_of_SRUM_for_incident_response.pdf(opens in new tab)