Author Name
ForensicsWiki

Artifact Name
Common Windows Most Recently Used Locations

Artifact/Program Version

Windows (various versions)

Categories

Registry

Description

Registry Keys

EDITOR’S NOTE (Joe)

The author sent in a submission which included numerous Registry Keys for examiners to look for regarding Windows MRU Locations.  It was essentially a copy & paste from the ForensicsWiki page.  I have left the link to that page below so that if you would like to check out that list you can for further educational purposes.  I felt that it did not fit the format that we are going for here on this site.  Thank you to the author for their submission!

Research Links

http://www.forensicswiki.org/wiki/List_of_Windows_MRU_Locations#Common

Forensic Programs of Use
RegRipper