analyzing-windows-amcache-artifacts
解析并分析 Windows Amcache.hve 注册表配置单元（Registry Hive），提取程序执行证据、文件元数据、 SHA-1 哈希及设备连接历史，用于数字取证（Digital Forensics）和事件响应（Incident Response）调查。
Source facts
- Repository
- killvxk/cybersecurity-skills-zh
- Last source activity
- March 17, 2026 at 21:38
- Detected SKILL.md language
- Chinese
- Stars
- 42
- Forks
- 9
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
