amcache_install#

$ target-query <path/to/target> -f amcache_install
Details#

Module

os.windows.log.amcache.AmcacheInstallPlugin

Output

records

Module documentation

Amcache install log plugin.

Function documentation

Return the contents of the Amcache install log.

The log file contains the changes an installer performed on the system. These only get created when the executable is an installer.