ShimCacheParser

ShimCacheParser copied to clipboard

Link to shimcache-whitepaper.pdf appears to be broken

1

The link to https://www.fireeye.com/content/dam/fireeye-www/services/freeware/shimcache-whitepaper.pdf appears to be broken. It referenced in https://github.com/mandiant/ShimCacheParser/blob/master/README

joachimmetz

EmperialX

This PR adds Python3 support for ShimCacheParser.py. The Script is still compatible with Python2. Since it is available via PyPI I removed the python-registry code from this repository instead of...

comawill

Unable to process SYSTEM hive for Windows 10 18003 Build 17134.1

5

[+] Reading binary file: /SYSTEM... [-] Got an unrecognized magic value of 0x66676572... bailing [-] No Shim Cache entries found...

mbevilacqua

Update ShimCacheParser.py

2

made minor fix to the read_zip function: - changed the file name to search for - removed hostname column - headers updated to be consistent with tool

jokim0x01