drop shimcache csv · sort by last modified · gaps >7d · burst clusters · same-hour correlation · suspicious paths · csv export · runs locally
shimcache csv
drop appcompat/shimcache csv
or click
drop appcompat/shimcache csv (shimcache-parser or mftecmd export)