Windows 8 AmCache.h...
 
Notifications
Clear all

Windows 8 AmCache.hve

2 Posts
2 Users
0 Likes
750 Views
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

All,

In case you weren't aware, there's been some new research into Windows 8 artifacts, specifically some that indicate program execution.

Corey's post http//journeyintoir.blogspot.com/2013/12/revealing-recentfilecachebcf-file.html

Yogesh's post http//www.swiftforensics.com/2013/12/amcachehve-in-windows-8-goldmine-for.html

A little something extra I was able to add http//windowsir.blogspot.com/2013/12/links-and-news.html

I thought this might be of interest to folks engaging in analysis of Windows 8 systems.

 
Posted : 05/12/2013 3:58 am
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

Thank you.

 
Posted : 05/12/2013 6:20 am
Share: