Posts tagged "collection"

• Where Amcache.hve is located on disk (and how to collect it)

  The exact file paths for Amcache.hve and its transaction logs across Windows versions, plus the right way to collect them for forensic analysis with KAPE, Velociraptor, or manually.

  2026-05-24