ForensicArtifacts / artifacts

Digital Forensics artifact repository

Apache License 2.0

1.06k stars 206 forks source link

Added Windows artifact definitions #532

Closed Qazeer closed 2 years ago

Qazeer commented 2 years ago

Added new Windows artifact definitions:

Windows Background Activity Moderator (BAM) and Desktop Activity Moderator (DAM) registry keys [program executions]
WordWheelQuery registry key for keywords searched from the Windows start menu [program executions / files and folders access]
Map Network Drive MRU registry key

codecov[bot] commented 2 years ago

Codecov Report

Merging #532 (7d8fb20) into main (9288b2c) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #532   +/-   ##
=======================================
  Coverage   88.03%   88.03%           
=======================================
  Files           7        7           
  Lines         443      443           
=======================================
  Hits          390      390           
  Misses         53       53

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more