#
shimcache
Here are 4 public repositories matching this topic...
C++ ShimCache (AppCompatCache) parser for execution artifact forensics
-
Updated
Feb 20, 2026 - C++
Read-only Windows forensic scanner for software traces — persistence, execution artifacts (Prefetch, Shimcache, BAM), user activity and Ghost Tasks correlation. 20+ modules mapped to MITRE ATT&CK.
windowscsharpdotnetpersistenceincident-responseprefetchforensicsdfirthreat-huntingforensic-analysisblue-teammitre-attackartifact-collectionshimcache
-
Updated
Jul 24, 2026 - C#
Windows AppCompatCache (ShimCache) forensic analyzer — reads the AppCompatCache value from a SYSTEM hive and r
-
Updated
Aug 20, 2026 - Rust
Improve this page
Add a description, image, and links to the shimcache topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the shimcache topic, visit your repo's landing page and select "manage topics."