Join Us!

Windows 8 AmCache.h...
 
Notifications
Clear all

Windows 8 AmCache.hve  

  RSS
keydet89
(@keydet89)
Community Legend

All,

In case you weren't aware, there's been some new research into Windows 8 artifacts, specifically some that indicate program execution.

Corey's post http//journeyintoir.blogspot.com/2013/12/revealing-recentfilecachebcf-file.html

Yogesh's post http//www.swiftforensics.com/2013/12/amcachehve-in-windows-8-goldmine-for.html

A little something extra I was able to add http//windowsir.blogspot.com/2013/12/links-and-news.html

I thought this might be of interest to folks engaging in analysis of Windows 8 systems.

Quote
Posted : 05/12/2013 3:58 am
Igor_Michailov
(@igor_michailov)
Senior Member

Thank you.

ReplyQuote
Posted : 05/12/2013 6:20 am
Share: