DFIRHub

Windows registry artifactQNAP QFinder

Displays the name of the QNAP as it was assigned by the user

  • Third Party Applications
  • 6 keys
  • NTUSER

Registry keys

6 keys that RECmd reads for this artifact

  • NTUSERSvrName
    SOFTWARE\QNAP\Qfinder\WOL\*

    Displays the name of the QNAP as it was assigned by the user

  • NTUSERSvrIPAddr
    SOFTWARE\QNAP\Qfinder\WOL\*

    Displays the IP Address of the QNAP as it was assigned by the user

  • NTUSERSvrVersion
    SOFTWARE\QNAP\Qfinder\WOL\*

    Displays the current firmware version of the QNAP

  • NTUSERSvrType
    SOFTWARE\QNAP\Qfinder\WOL\*

    Displays the type of the QNAP device

  • NTUSERSvrModel
    SOFTWARE\QNAP\Qfinder\WOL\*

    Displays the model of the QNAP device

  • NTUSERInstallDate
    SOFTWARE\QNAP\Qfinder

    Displays the install date of QNAP QFinder

References

1 link

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)