Top Tweets for #amcache
Sizden gelen sorular;
Bir disk imajından #MFT, #Prefetch, #Amcache ve #Shimcache gibi artefaktları analiz etmek mümkün müdür? Örneğin, #CyberDefenders gibi platformlarda paylaşılan disk imajları bu tür analizler için yeterli veri sağlar mı? Bu tür analizler için hangi araçlar tercih edilmelidir?
In #DFIR, Windows operating systems leave behind a wealth of artifacts that can be invaluable, including #ShimCache (Application Compatibility Cache) and #AmCache (Application Activity Cache). In this blog, learn more about their significance: https://t.co/qCw9AY9bHM
#DFIRSummit 2019 Talk: #AmCache Investigation and Various Uses of the AmCache Artifact from Blanche Lagny (@moustik01)
Watch the talk here: https://t.co/OnM2Gu24S1

#DFIRSummit 2019 Talk: #AmCache Investigation and Various Uses of the AmCache Artifact from Blanche Lagny (@moustik01)
Watch the talk here: https://t.co/OnM2Gu24S1

#DFIRSummit 2019 Talk: #AmCache Investigation and Various Uses of the AmCache Artifact from Blanche Lagny (@moustik01)
https://t.co/OnM2Gu24S1

Blanche Lagny (@moustik01) spoke at the 2019 @DFIRSummit on #AmCache - the basics, as well as highlight the relevance of its use through various examples.
Watch it here: https://t.co/OnM2Gu24S1

#DFIR #Kuiper #DFIRKuiper #Amcache parser replaced with new script to fix issues, replaced the old script with regsk plugin, thanks @muteb_alqahtani
Awesome talk on #AmCache by @moustik01. Seems like great material for a future @13CubedDFIR episode! #DFIRSummit

Frequently overlooked and understudied, the #AmCache is rarely fully exploited when doing incident response. Follow-up on the analysis of the AmCache with an updated version of the research paper, presented during
#DFIRSummmit: https://t.co/mu3jFlkB5L
Meet @ANSSI_FR at #DFIRsummit for a follow-up on the research on the AmCache #Forensic
https://t.co/n4xuk1hN06
Second Talk of the day! @moustik01 takes us through her research on #AmCache. Her report (66 pages!) will be released to the #DFIR Community in the next days! Stay tuned! #DFIRSummit


Just got confirmed for #DFIRSummit at Austin! Time to go back to #amcache testing to update my paper. And also find some english jokes because mine only work in french... @sansforensics @ANSSI_FR
@moustik01 excellent #AmCache whitepaper + #PowerShell + some additional interpretations = simple #DFIR script reporting all non-Windows drivers ever loaded into the system.
https://t.co/5QDd48XUgO
Awesome #AmCache analysis from @moustik01, this is a #MustRead. AmCache is an artifact which stores metadata related to PE execution & program installation on Windows 7, Server 2008 R2 & above. This DB is rarely fully utilized when doing #DFIR. https://t.co/9VMfwAM6Gj
Learn how to leverage #Amcache and #Shimcache artifacts in a #digital #forensics case. https://t.co/tTGrhpJVqr #cybersecurity #infosec
Matias Bevilacqua from @Mandiant presenting on #Shimcache & #AmCache enterprise-wide "hunting" #ThreatHuntingSummit #DFIR

Last Seen Hashtags on Sotwe
Most Popular Users

Elon Musk 
@elonmusk
240.4M followers

Barack Obama 
@barackobama
119.3M followers

Donald J. Trump 
@realdonaldtrump
111.7M followers

Cristiano Ronaldo 
@cristiano
110M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
97.5M followers

NASA 
@nasa
92.1M followers

Justin Bieber 
@justinbieber
90.8M followers

KATY PERRY 
@katyperry
87.3M followers

Taylor Swift 
@taylorswift13
81.2M followers

Lady Gaga 
@ladygaga
72.7M followers

Kim Kardashian 
@kimkardashian
69.6M followers

Virat Kohli 
@imvkohli
69.4M followers

YouTube 
@youtube
68.6M followers

Bill Gates 
@billgates
63.7M followers

The Ellen Show
@theellenshow
62.5M followers

Neymar Jr 
@neymarjr
62.1M followers

CNN 
@cnn
61.9M followers

X 
@x
60.9M followers

Selena Gomez 
@selenagomez
60.4M followers












