AmCache artifact: forensic value and a tool for data extraction | Securelist
Kaspersky experts share insights into how AmCache may prove useful during incident investigation, and provide a command line tool to extract data from this artifact.| securelist.com
