AmcacheParser

Category: Digital Forensics Tool
Platform: Windows
License: Freeware
Version: Latest

Forensic utility that parses the Windows Amcache.hve registry hive to extract evidence of executed programs and system artifacts.

forensics windows registry dfir