AmCache-EvilHunter
Parses and analyzes Windows Amcache registry hives to find evidence of malware execution
Desktopfreeglobal

AmCache-EvilHunter is a command-line forensics tool that parses and analyzes the Windows Amcache registry hive to find evidence of program execution, including malware, with built-in VirusTotal lookups. It's built for digital forensics and incident response analysts investigating what ran on a Windows machine.
Categories
digital forensicsincident response tooling
Something wrong with this listing — dead link, not a real product, wrong info?

