DFIRHub

Windows registry artifactSplashtop

Displays artifacts relating to Splashtop

  • Third Party Applications
  • 7 keys
  • SYSTEMNTUSERSOFTWARE

Registry keys

7 keys that RECmd reads for this artifact

  • SYSTEMrecursive
    CurrentControlSet\Services\SplashtopRemoteService

    Displays artifacts relating to Splashtop

  • SYSTEMrecursive
    ControlSet00*\Services\SplashtopRemoteService

    Displays artifacts relating to Splashtop

  • SYSTEMrecursive
    CurrentControlSet\Services\SSUService

    Displays artifacts relating to Splashtop

  • SYSTEMrecursive
    ControlSet00*\Services\SSUService

    Displays artifacts relating to Splashtop

  • NTUSERrecursive
    Software\Splashtop Inc.

    Displays artifacts relating to Splashtop

  • SOFTWARErecursive
    WOW6432Node\Splashtop Inc.

    Displays artifacts relating to Splashtop

  • SOFTWARErecursive
    WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater

    Displays artifacts relating to Splashtop

References

3 links

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)