Posts tagged "amcacheparser"

• Who created AmcacheParser?

  Eric Zimmerman, a former FBI special agent and current Senior Director at Kroll, created AmcacheParser as part of his open-source DFIR tool suite.

  2026-05-24

• Is AmcacheParser free?

  Yes. AmcacheParser is free for any use including commercial DFIR work, published under a permissive license by Eric Zimmerman.

  2026-05-24

• AmcacheParser output columns explained: every CSV field decoded

  A field-by-field reference for AmcacheParser's CSV output — FileId, PathHash, ProgramId, LinkDate, BinFileVersion, IsPeFile, and every other column, with the pivots that matter in DFIR.

  2026-05-24

• AmcacheParser download guide: official sources, mirrors, and verification

  Every way to download Eric Zimmerman's AmcacheParser — Get-ZimmermanTools, direct download, KAPE, Velociraptor — with checksum verification and air-gapped install patterns.

  2026-05-24

• AmcacheParser: the complete guide to Eric Zimmerman's tool

  A definitive guide to AmcacheParser — what it does, how to install and run Eric Zimmerman's CLI, how to read its CSV output, and when to reach for the browser-based alternative.

  2026-05-24

• AmcacheParser CLI cheatsheet: every flag, with worked examples

  A practical command-line reference for Eric Zimmerman's AmcacheParser — every flag explained, with KAPE, Velociraptor, and PowerShell batch-processing patterns you can copy and paste.

  2026-05-24

• Amcache parsers compared: AmcacheParser CLI, browser tool, Volatility, RegRipper

  Side-by-side comparison of the four ways to parse a Windows Amcache.hve hive in 2026 — Eric Zimmerman's AmcacheParser CLI, the browser tool, Volatility 3, and RegRipper.

  2026-05-24