Skip to content

Version 1.0

Choose a tag to compare

@reygiss reygiss released this 14 May 21:08
· 900 commits to master since this release

Using the Win32 API:
πŸ–₯️ System information (including timezone and runtime)
⏰ Scheduled tasks
πŸ” Open sessions
βš™οΈ Running processes
πŸ‘€ User accounts
🧩 Services
πŸ“‘ Event logs (optional)

By parsing the registry:
🧭 UserAssist
πŸ—‚οΈ MUICache
πŸ•΅οΈ Background Activity Monitor (BAM)
πŸ”Œ USB devices
🧳 Shellbags
πŸ“‚ MRU entries
πŸš€ RUN keys analysis
🧱 Shimcache
πŸ—ƒοΈ Amcache
🧷 Jumplists

By parsing disk files:
πŸ“„ Prefetch files
πŸ“ Recent documents