🖥️
Windows DFIR
⌘
Ctrl
k
For the complete documentation index, see
llms.txt
. This page is also available as
Markdown
.
Copy
On this page
Windows Artifacts
Persistence
Registry
Scheduled Tasks
Startup
Tool: AutoRuns
Accounts
WMI Event Consumers
PowerShell Scripts
CrowdStrike Searches
Previous
PCA (Program Compatibility Assistant)
Next
Registry
Last updated
2 years ago