Skip to content

Latest commit

 

History

History
22 lines (12 loc) · 1.36 KB

readme.md

File metadata and controls

22 lines (12 loc) · 1.36 KB

Windows 10 (1703+) AmCache.hve

  • AmCache.ps1 Powershell script to parse the entries in

    AmCache.hve::Root/InventoryApplicationFile/

    User can select all lines (Ctrl+A) or specific lines (Ctrl+click) and copy/paste (Ctrl+C and Ctrl+V) the data to a text file or MS Excel spreadsheet. The Selected lines are also displayed in the console after the user presses the OK button.

  • AmCache1.ps1 Powershell script to parse the entries in the following keys of AmCache.hve

    AmCache.hve::Root/InventoryApplication/ and
    AmCache.hve::Root/InventoryApplicationFile/

    preview1

    User can select all lines (Ctrl+A) or specific lines (Ctrl+click) and copy/paste (Ctrl+C and Ctrl+V) the data to a text file or MS Excel spreadsheet. The Selected lines are also displayed in the console after the user presses the OK button.

    preview2