Course contentsShow
Security
Lesson 2404 of 3,05246. Incident ResponsePro lesson

Artifact Analysis: Prefetch, Shimcache, and Amcache

Analyze Windows artifacts that track program execution including prefetch files, shimcache, amcache, and BAM/DAM for timeline reconstruction.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.