Artifacts

Registry: Common MRUs

Posted by:  /  Tags: , ,  /  Comments: 1

Author Name
ForensicsWiki

Artifact Name
Common Windows Most Recently Used Locations

Artifact/Program Version

Windows (various versions)

Categories

Registry

Description

Registry Keys

EDITOR’S NOTE (Joe)

The author sent in a submission which included numerous Registry Keys for examiners to look for regarding Windows MRU Locations.  It was essentially a copy & paste from the ForensicsWiki page.  I have left the link to that page below so that if you would like to check out that list you can for further educational purposes.  I felt that it did not fit the format that we are going for here on this site.  Thank you to the author for their submission!

Research Links
http://www.forensicswiki.org/wiki/List_of_Windows_MRU_Locations#Common

Forensic Programs of Use
RegRipper

One Comment

arrow

[…] This post was mentioned on Twitter by sansforensics and CyberCrime101, Forensic Artifacts. Forensic Artifacts said: Registry: Common MRUs http://bit.ly/arHtek […]

Leave a Reply

Your Name: (required)

Your Email: (will not be published) (required)

Your Website:

Your Message:

submit comment