Awesome

Overview

This project contains plugins for the Volatility Framework.

• shimcachemem - parses the Windows Application Compatibility Database (aka, ShimCache) from memory