bars
🔍
Windows Forensic Handbook
search
circle-xmark
Ctrl
k
copy
Copy
chevron-down
Artifacts by Activity
chevron-right
🏃♂️
Execution
First Executed
Prefetch
chevron-right
AutomaticDestinations Jumplists
chevron-right
Task Scheduler Files
chevron-right
Tracing Registry Keys
chevron-right
Task Scheduler Operational Log
chevron-right
EventID 4104: PowerShell Script Block Logging
chevron-right
Last updated
2 years ago
sun-bright
desktop
moon
sun-bright
desktop
moon