Which tools can verify CAT file digital signatures, and why might Get-AuthenticodeSignature fail?

`signtool.exe` and `sigcheck.exe` can verify CAT signatures, while PowerShell’s `Get-AuthenticodeSignature` may fail on Windows 7 because it does not natively support catalog queries. On Windows 10, `Get-AuthenticodeSignature` retrieves CAT signatures. For example, using `signtool.exe verify /pa /a C:\Windows\System32\xwizard.exe` shows the catalog-signed status, whereas `Get-AuthenticodeSignature` might return an unsigned result on older systems.