Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
-
Updated
Oct 18, 2026 - Python
#
amcache
Here are 4 public repositories matching this topic...
A cross-platform DFIR tool for parsing Windows IconCache.db artifacts, recovering historical file paths, and enriching forensic evidence with Amcache data.
python incident-response dfir threat-hunting malware-analysis digital-forensics amcache windows-forensics forensic-artifacts artifact-analysis iconcache iconcache-parser
-
Updated
Apr 13, 2026 - Python
AI-assisted forensic triage tool that correlates Windows Amcache, Prefetch and ShimCache artifacts with threat intelligence. A constrained LLM reasoning engine produces explainable verdicts. Capstone project.
-
Updated
Nov 1, 2026 - Python
Python-based DFIR utilities for extracting and deduplicating SHA-1 hashes from Windows Amcache CSV exports and preparing batches for malware reputation analysis.
python incident-response dfir sha1 malware-analysis digital-forensics threat-intelligence amcache malware-triage windows-forensics hash-analysis ioc-extraction
-
Updated
Oct 24, 2026 - Python
Add this topic to your repo
To associate your repository with the amcache topic, visit your repo's landing page and select "manage topics."