detailed forensic analysis and interpretation of the AmCache by Blanche Lagny of @ANSSI_FR

https://www.ssi.gouv.fr/uploads/2019/01/anssi-coriin_2019-analysis_amcache.pdf