Update AppCompatPCA.tkape

add documentation
EricZimmerman · Dec 5, 2023 · 3f6616c · 3f6616c
1 parent d366c90
commit 3f6616c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Targets/Windows/AppCompatPCA.tkape b/Targets/Windows/AppCompatPCA.tkape
@@ -10,6 +10,8 @@ Targets:
         Path: C:\Windows\appcompat\pca
 
 # Documentation
+# https://aboutdfir.com/new-windows-11-pro-22h2-evidence-of-execution-artifact/
+# https://blog.sygnia.co/diving-into-the-new-windows-11-pca-artifact
 # Credit to rancio#4162 on the Digital Forensics Discord Server who noticed this artifact - https://discord.com/channels/427876741990711298/427936091220344833/1057680326484299786
 # This artifact appears to be on Windows 11 only and will comprise of the following files:
 # C:\Windows\appcompat\pca\PcaAppLaunchDic.txt