search

volatilityfoundation / volatility3

Volatility 3.0 development
http://volatilityfoundation.org/
Other
2.72k stars 461 forks source link

Improve windows.amcache plugin description #1337

Closed joren485 closed 2 weeks ago

joren485 commented 2 weeks ago

The description of the windows.amcache.Amcache plugin seems to have been copied from the windows.svclist.SvcList plugin and was not changed. This PR changes the description to reflect the actual use of the plugin:

    windows.amcache.Amcache
                        Extract information on executed applications from the
                        AmCache.
ikelos commented 2 weeks ago

Looks good, thanks for spotting it and fixing it up!