Agent Skills: Analyzing Windows Amcache Artifacts

>

UncategorizedID: autohandai/community-skills/analyzing-windows-amcache-artifacts

Install this agent skill to your local

pnpm dlx add-skill https://github.com/autohandai/community-skills/tree/HEAD/analyzing-windows-amcache-artifacts

Skill Files

Browse the full folder contents for analyzing-windows-amcache-artifacts.

Download Skill

Loading file tree…

analyzing-windows-amcache-artifacts/SKILL.md

Skill Metadata

Name
analyzing-windows-amcache-artifacts
Description
>

Analyzing Windows Amcache Artifacts

Extract execution evidence from Amcache.hve including application paths, SHA-1 hashes, timestamps, and publisher metadata for DFIR investigations.