amcache-core

crates.io

Pure-Rust read-only Windows Amcache.hve reader — decodes the modern (Windows 10/11) InventoryApplicationFile execution-evidence entries (path, SHA-1, publisher, size, link date) and InventoryDevicePnp device entries from an Amcache hive.

Versions collected1

Direct dependencies1From release 0.1.0

Last observed21 Oct, 11:33 UTC

Downloads & popularity

103downloads

Cumulative counter · observed snapshots21 Oct 2026

103100.998.9

21 Oct21 Oct

crates · 1 observations shown. Missing days are unknown. Counter changes are not daily download totals.

View observed values

Date / source period	Value	Observed at
2026-10-21	103	2026-10-21T11:33:21.9497022Z

Versions 1

Collected releases

Version	Published	Direct dependencies	Open version
0.1.0Registry latest	16 Jul 2026	1

Package advisories

No matching advisories collected

This describes our collected data; it is not a security assessment.

Repository

PENDING

securityronin/amcache-forensic

Shared repository data · GitHub

License detected in repository: Not collected

Metadata history

Meaningful changes

Current collected state Current

Observed since 21 Oct, 11:33 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package:e35c80f1f72a57bcbe39eac8c851b64ba71b432e5f5e6d22e24154d5ff610351