Overview

This project contains plugins for the Volatility Framework.

  • shimcachemem - parses the Windows Application Compatibility Database (aka, ShimCache) from memory