![Eric Zimmerman on Twitter: "Announcing SrumECmd! Processes SRUDB.dat and optionally SOFTWARE hive for all kinds of details. Normalizes and extracts out additional detail such as exe description, timestamps, etc. Full TLE support, Eric Zimmerman on Twitter: "Announcing SrumECmd! Processes SRUDB.dat and optionally SOFTWARE hive for all kinds of details. Normalizes and extracts out additional detail such as exe description, timestamps, etc. Full TLE support,](https://pbs.twimg.com/media/EqfXAi6XIAMReBY.png)
Eric Zimmerman on Twitter: "Announcing SrumECmd! Processes SRUDB.dat and optionally SOFTWARE hive for all kinds of details. Normalizes and extracts out additional detail such as exe description, timestamps, etc. Full TLE support,
![Program execution analysis in Windows: A study of data sources, their format and comparison of forensic capability | Semantic Scholar Program execution analysis in Windows: A study of data sources, their format and comparison of forensic capability | Semantic Scholar](https://d3i71xaburhd42.cloudfront.net/c387c440319b5c70078e5571a5ef48a36fd474e4/3-Table1-1.png)
Program execution analysis in Windows: A study of data sources, their format and comparison of forensic capability | Semantic Scholar
Eric Zimmerman on Twitter: "Announcing SrumECmd! Processes SRUDB.dat and optionally SOFTWARE hive for all kinds of details. Normalizes and extracts out additional detail such as exe description, timestamps, etc. Full TLE support,
![SRUM Dump v2.4 releases: extracts information from the System Resource Utilization Management Database SRUM Dump v2.4 releases: extracts information from the System Resource Utilization Management Database](https://securityonline.info/wp-content/uploads/2020/05/srum_live_acquisition.png)