prefetch2es uses the Python library pyscca, providing high-performance parsing of Windows Prefetch files. It also allows recursive import from the specified directory. $ tree . pffiles/ ├── file1.pf ...