🖥️
Windows DFIR
⌘
Ctrl
k
For the complete documentation index, see
llms.txt
. This page is also available as
Markdown
.
Copy
On this page
Windows Artifacts
Processes
at.exe
explorer.exe
lsass.exe
lsaiso.exe
PuTTy.exe
runtimebroker.exe
services.exe
smss.exe
System
svchost.exe
winlogon.exe
wininit.exe
Previous
Browser History Finder
Next
at.exe
Last updated
2 years ago