RecentFileCache

RecentFileCache

Windows
2 paths
RecentFileCache.bcf
Version 1
Eric Zimmerman

Paths on disk

2 paths

References

3 links

Collect it

KAPE command line for RecentFileCache

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target RecentFileCache

Run with administrator privileges. KAPE Documentation

Part of these collections

6 collections collect this target