Statements (13)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
Windows artifact
|
| gptkbp:analyzes |
digital forensics experts
|
| gptkbp:canBeParsedBy |
third-party forensic tools
|
| gptkbp:contains |
file execution metadata
program installation information |
| gptkbp:fileLocation |
C:\\Windows\\AppCompat\\Programs\\Amcache.hve
|
| gptkbp:format |
Windows Registry Hive
|
| https://www.w3.org/2000/01/rdf-schema#label |
Amcache
|
| gptkbp:introducedIn |
gptkb:Windows_8
|
| gptkbp:numberOfLocations |
application execution data
|
| gptkbp:usedFor |
forensic analysis
|
| gptkbp:bfsParent |
gptkb:KAPE
|
| gptkbp:bfsLayer |
8
|