Add your listing here
AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
SDB Explorer is a GUI program that allows for interacting with Microsoft Shim databases.
This EnScript mounts all SYSTEM registries found in the current evidence, parses the Application Compatility Cache registry key and output the result onto the console, bookmark ... Read More...
wacu?is a command line tool that targets the Windows system registry hive? ... Read More...
"There are a number of reasons for porting, primarily to understand the SHIM cache format better, and this would not be possible without the excellent work from Andrew Davis (Mandiant)."
© 2019 Copyright | DFIR Training