explainx.ainewsletter3.4k
tag

program-execution▌

2 indexed skills · max 10 per page

skills (2)

analyzing-lnk-file-and-jump-list-artifacts

mukul975/Anthropic-Cybersecurity-Skills · analyzing-lnk-file-and-jump-list-artifacts

0

Analyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution, and user activity using LECmd, JLECmd, and manual binary parsing of the Shell Link Binary format.

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills · analyzing-windows-amcache-artifacts

0

Parses and analyzes the Windows Amcache.hve registry hive to extract evidence of program execution, application installation, and driver loading for digital forensics investigations. Uses Eric Zimmerman's AmcacheParser and Timeline Explorer for artifact extraction, SHA-1 hash correlation with threat intel, and timeline reconstruction. Activates for requests involving Amcache forensics, program execution evidence, Windows artifact analysis, or application compatibility cache investigation.