README.md

October 26, 2015 ยท View on GitHub

Overview

This project contains plugins for the Volatility Framework.

  • shimcachemem - parses the Windows Application Compatibility Database (aka, ShimCache) from memory