Closed Markus98 closed 1 year ago
A new feature for creating execution timelines using Shimcache artifacts with optional Amcache enrichment. Also added functionality to parse Windows registry hive files.
A new feature for creating execution timelines using Shimcache artifacts with optional Amcache enrichment. Also added functionality to parse Windows registry hive files.