Windows 8 AmCache.hve

All,

In case you weren't aware, there's been some new research into Windows 8 artifacts, specifically some that indicate program execution.

Corey's post http//journeyintoir.blogspot.com/2013/12/revealing-recentfilecachebcf-file.html

Yogesh's post http//www.swiftforensics.com/2013/12/amcachehve-in-windows-8-goldmine-for.html

A little something extra I was able to add http//windowsir.blogspot.com/2013/12/links-and-news.html

I thought this might be of interest to folks engaging in analysis of Windows 8 systems.