DFIRHub

ProgramExecution

Program Execution Triage Collection

  • Compound
  • 36 paths from 12 artifacts
  • Per-user data
  • Version 1
  • Max Zabuty

Paths on disk

36 paths from 12 targets

Paths use Windows environment variable syntax

Includes 12 targets

Each one is collected with this target

Notes

Collecting different artifacts related to program execution on the host