-
Notifications
You must be signed in to change notification settings - Fork 284
Open
Description
When I'm trying to run Get-ForensicAmcache it returns an error:
Get-ForensicAmcache : Cannot find key 'Root\File' in the 'C:\Windows\appcompat\Programs\Amcache.hve' hive because it does not exist.
At line:1 char:1
- Get-ForensicAmcache -HivePath C:\Windows\appcompat\Programs\Amcache.h ...
-
+ CategoryInfo : NotSpecified: (:) [Get-ForensicAmcache], Exception + FullyQualifiedErrorId : System.Exception,PowerForensics.Cmdlets.GetAmcacheCommand
Am I doing something wrong?
The path for Amcache.hve is correct.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels