Posts tagged "collection"

• Where Amcache.hve is located on disk (and how to collect it)

  Path: C:\Windows\AppCompat\Programs\Amcache.hve plus the .LOG files. Always all three. Plus the right way to collect from a live host and from shadow copies.

  2026-05-24