AmCache Investigation - SANS Digital Forensics & Incident Response Summit 2019
Reviewing Data from AmCache
Let's Talk About Shimcache - The Most Misunderstood Artifact
Forensic Lunch 2/1/19 Blanche Lagny Amcache DFIR Review
ShimCache and AmCache enterprise-wide hunting - SANS Threat Hunting Summit 2017
DFIR in 120 Seconds - Shimcache
How to investigate Windows Prefetch Files
Intro to Windows Forensics: Windows Registry Artifacts - TryHackMe Walkthrough
(Am)Cache rules everything around me
Disk Analysis with Autopsy | HackerSploit Blue Team Training
Starting a New Digital Forensic Investigation Case in Autopsy 4.19+
ShellBag Forensics
Shim/AmCache Should Not be Trusted for Evidence of Execution
Persistence Mechanisms
Les BASES de l'analyse FORENSIQUE (avec Tristan "X-No" Manzano)
Practical Windows Forensics (PWF) - BONUS: Amcache in-depth analysis and why scheduled tasks matter
Let's Talk About MUICache
Shimcache Execution Is Back - What You Need to Know!
Collect Program Artifact Traces with OSForensics
NTFS Journal Forensics
SANS SIFT - AmCache/RecentFileCache Parsing
Complex malware forensics investigation by Paul Rascagneres and Sebastien Larinier
SANS DFIR Webcast -- Cache Me If You Can!
Tracking Potentially Malicious Files with Evidence of Execution
Forensicating Windows Artifacts: Investigation Without Event Logs! - Renzon Cruz
