Posts tagged "collection"
- Where Amcache.hve is located on disk (and how to collect it)
Path: C:\Windows\AppCompat\Programs\Amcache.hve plus the .LOG files. Always all three. Plus the right way to collect from a live host and from shadow copies.
2026-05-24