Project description

PyPI PyPI - License PyPI - Python Version

amcache2.py

creates a bodyfile from AmCache.hve

Installation

I recommend to use pipenv instead of venv, because using venv I had problems with https://github.com/construct/construct/pull/930

pipenv install amcache2

Usage

usage: amcache2.py [-h] registry_hive

Parse program execution entries from the Amcache.hve Registry hive

positional arguments:
  registry_hive  Path to the Amcache.hve hive to process

options:
  -h, --help     show this help message and exit

Example

pipenv run amcache2.py Amcache.hve | mactime -d -b -

Project details

These details have not been verified by PyPI

Project links

Release history Release notifications | RSS feed

This version

0.1.4

Nov 2, 2021

0.1.3

Nov 2, 2021

0.1.2

Nov 2, 2021

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

amcache2-0.1.4.tar.gz (14.9 kB view details)

Uploaded Nov 2, 2021 Source

Built Distribution

amcache2-0.1.4-py3-none-any.whl (14.9 kB view details)

Uploaded Nov 2, 2021 Python 3

File details

Details for the file amcache2-0.1.4.tar.gz.

File metadata

Download URL: amcache2-0.1.4.tar.gz
Upload date: Nov 2, 2021
Size: 14.9 kB
Tags: Source
Uploaded using Trusted Publishing? No
Uploaded via: twine/3.4.2 importlib_metadata/4.8.1 pkginfo/1.7.1 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.62.3 CPython/3.10.0

File hashes

Hashes for amcache2-0.1.4.tar.gz
Algorithm	Hash digest
SHA256	`3277dfaae29d229847f017cff33cc966cf38941d23ba9e25759f3471661127de`
MD5	`28241812ccd6bbc8c8659236d8f5779b`
BLAKE2b-256	`90667be23e84858829dbd4c5e241d0b15e68a5172f9125e90add5f7467a99623`

See more details on using hashes here.

File details

Details for the file amcache2-0.1.4-py3-none-any.whl.

File metadata

Download URL: amcache2-0.1.4-py3-none-any.whl
Upload date: Nov 2, 2021
Size: 14.9 kB
Tags: Python 3
Uploaded using Trusted Publishing? No
Uploaded via: twine/3.4.2 importlib_metadata/4.8.1 pkginfo/1.7.1 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.62.3 CPython/3.10.0

File hashes

Hashes for amcache2-0.1.4-py3-none-any.whl
Algorithm	Hash digest
SHA256	`440fca3879a501ce477efd5cd4c42216fa960ba581188f42258a7ba15bfba9ae`
MD5	`1f834193a645b55f0de8c4107e91a440`
BLAKE2b-256	`07f98ba34c4ff981fd43e5b35fd0ecc83b797852eae20bdfac67eefae08647b4`