ShimCache Parser (EnScript)


DFIR Tools

License Type
Forensic Utilities - Windows
  • Registry
  • Shimcache
This EnScript mounts all SYSTEM registries found in the current evidence, parses the Application Compatility Cache registry key and output the result onto the console, bookmarks and tab-delimited CSV file.

User comments

There are no user comments for this listing.
Already have an account? or Create an account