Project description

PyPI PyPI - License PyPI - Python Version

amcache2.py

creates a bodyfile from AmCache.hve

Installation

I recommend to use pipenv instead of venv, because using venv I had problems with https://github.com/construct/construct/pull/930

pipenv install amcache2

Usage

usage: amcache2.py [-h] registry_hive

Parse program execution entries from the Amcache.hve Registry hive

positional arguments:
  registry_hive  Path to the Amcache.hve hive to process

options:
  -h, --help     show this help message and exit

Example

pipenv run amcache2.py Amcache.hve | mactime -d -b -

Project details

These details have not been verified by PyPI

Project links

Release history Release notifications | RSS feed

This version

0.1.4

Nov 2, 2021

0.1.3

Nov 2, 2021

0.1.2

Nov 2, 2021

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

amcache2-0.1.4.tar.gz (14.9 kB view hashes)

Uploaded Nov 2, 2021 Source

Built Distribution

amcache2-0.1.4-py3-none-any.whl (14.9 kB view hashes)

Uploaded Nov 2, 2021 Python 3

Hashes for amcache2-0.1.4.tar.gz

Hashes for amcache2-0.1.4.tar.gz
Algorithm	Hash digest
SHA256	`3277dfaae29d229847f017cff33cc966cf38941d23ba9e25759f3471661127de`
MD5	`28241812ccd6bbc8c8659236d8f5779b`
BLAKE2b-256	`90667be23e84858829dbd4c5e241d0b15e68a5172f9125e90add5f7467a99623`

Hashes for amcache2-0.1.4-py3-none-any.whl

Hashes for amcache2-0.1.4-py3-none-any.whl
Algorithm	Hash digest
SHA256	`440fca3879a501ce477efd5cd4c42216fa960ba581188f42258a7ba15bfba9ae`
MD5	`1f834193a645b55f0de8c4107e91a440`
BLAKE2b-256	`07f98ba34c4ff981fd43e5b35fd0ecc83b797852eae20bdfac67eefae08647b4`