Win 11 Program-Compatibility

• (Powershell script) Event Log parser
  Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx

• (pca.ps1), (pca.exe) - Combined parser, for:

  • \Windows\appcompat\pca\PcaAppLaunchDic.txt
  • \Windows\appcompat\pca\PcaGeneralDb0.txt
  • \Windows\appcompat\pca\PcaGeneralDb1.txt
  • Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx
  
  

  Get-Help .\pca.ps1
   pca.ps1 [[-Pca] <string>] [[-Evtx] <string>] [[-OutPath] <string>] [-CSV] [-NoGUI]
  

[Note]: Both scripts need to be run 'As Admin'

(The appcompat\pca track Application launches (except those from Start menu (?)))

• Related:
  • aboutdfir Blog post
  • 13Cubed Video