Home Software Extract data from System Resource Usage Monitor database with srum-dump

Extract data from System Resource Usage Monitor database with srum-dump

0
0
3,406

Srum-dump is an open source tool by Mark Baggett, which creates an excel spreadsheet containing forensics artifacts contained the SRUM (System Resource Utilization Manager) database.

The program can be run with no input and it will prompt you for each of the needed arguments. The program requires two inputs. The first is an SRUM database. The SRUM database is usually \Windows\system32\sru\SRUDB.dat. The second is a XLSX template file that contains the names of the tables and fields that you want to extract from the SRUM database. SRUM_TEMPLATE.xlsx is distributed with the program and it includes the fields that you will most likely be interested in. If you want to add additional XLS calculations or remove fields form the SRUM database you can make a copy of SRUM_TEMPLATE.xlsx and change that template file as needed. The program will create a new XLSX file containing the fields specified inside the template.

Check Mark’s GitHub to learn more about the tool.

Load More Related Articles
Load More In Software
Comments are closed.