Added WindowsSystemResourceUsageMonitorDatabaseFile definition

ForensicArtifacts · Mar 18, 2018 · 85d8e6a · 85d8e6a
1 parent 1a89795
commit 85d8e6a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/data/windows.yaml b/data/windows.yaml
@@ -1842,6 +1842,16 @@ labels: [System]
 supported_os: [Windows]
 urls: ['https://github.com/libyal/winreg-kb/wiki/Registry-files']
 ---
+name: WindowsSystemResourceUsageMonitorDatabaseFile
+doc: Windows System Resource Usage Monitor (SRUM) database file.
+sources:
+- type: FILE
+  attributes:
+    paths: ['%%environ_systemroot%%\System32\sru\SRUDB.dat']
+    separator: '\'
+supported_os: [Windows]
+urls: ['https://github.com/libyal/esedb-kb/blob/master/documentation/System%20Resource%20Usage%20Monitor%20(SRUM).asciidoc']
+---
 name: WindowsTempDirectories
 doc: Contents of the Windows temporary directories
 sources: