Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
-
Updated
Aug 12, 2025 - Python
Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
Advanced Windows Forensic Engine (Amcache & Shimcache Correlation). Built with Sigma Rules, SHA-256 Integrity, and PII Masking (KVKK/GDPR). Educational Refactor of Amcache-EvilHunter.
Add a description, image, and links to the amcache topic page so that developers can more easily learn about it.
To associate your repository with the amcache topic, visit your repo's landing page and select "manage topics."