AppCompatCacheParser

Category: Digital Forensics Tool
Platform: Windows
License: Freeware
Version: Latest

Command-line parser that extracts and analyzes Windows AppCompatCache (ShimCache) data to identify evidence of program execution.

forensics windows shimcache dfir