Skip to content

Conversation

theAtropos4n6
Copy link
Contributor

Added PuTTY NTUSER Artifacts

Description

Please include a summary of the change and (if applicable) which issue is fixed.

Checklist:

Please replace every instance of [ ] with [X] OR click on the checkboxes after you submit your PR

  • I have generated a unique GUID for my Batch file(s)
  • I have tested and validated the new Batch file(s) against test data and achieved the desired output
  • [] I have placed the Batch file(s) within the .\RECmd\BatchExamples directory
  • I have set or updated the version of my Batch file(s)
  • I have made an attempt to document the artifacts within the Batch file(s)
  • I have consulted the Guide/Template to ensure my Map(s) follow the same format

Thank you for your submission and for contributing to the DFIR community!

Added Putty NTUSER Artifacts
Added CCleaner, File Shredder, and Splashtop artifacts
Copy link
Collaborator

@AndrewRathbun AndrewRathbun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome work

@AndrewRathbun AndrewRathbun merged commit b5519a7 into EricZimmerman:master Oct 3, 2025
1 check passed
@theAtropos4n6
Copy link
Contributor Author

Your work is amazing! Glad to be able to help a little bit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants