davehull / Kansa

A Powershell incident response framework
Apache License 2.0
1.56k stars 266 forks source link

Add Get-AppCompatCache Module #164

Closed ghost closed 7 years ago

ghost commented 7 years ago

Add module to run AppCompatCacheParser.exe on remote systems and return results as a powershell object.

AppCompatCacheParser.exe can be downloaded from http://ericzimmerman.github.io/

athegist commented 7 years ago

This whole framework needs pester tests. Yolo.