±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36096
New Yesterday: 7 Visitors: 115

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Windows 8 AmCache.hve

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

keydet89
Senior Member
 

Windows 8 AmCache.hve

Post Posted: Dec 05, 13 04:58

All,

In case you weren't aware, there's been some new research into Windows 8 artifacts, specifically some that indicate program execution.

Corey's post: journeyintoir.blogspot...-file.html

Yogesh's post: www.swiftforensics.com...e-for.html

A little something extra I was able to add: windowsir.blogspot.com...-news.html

I thought this might be of interest to folks engaging in analysis of Windows 8 systems.  
 
  

Igor_Michailov
Senior Member
 

Re: Windows 8 AmCache.hve

Post Posted: Dec 05, 13 07:20

Thank you.
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 
 

Page 1 of 1