Windows registry artifactTypedURLs
Internet Explorer/Edge Typed URLs
- User Activity
- 1 key
NTUSER
Registry keys
1 key that RECmd reads for this artifact
NTUSERSoftware\Microsoft\Internet Explorer\TypedURLsInternet Explorer/Edge Typed URLs
References
5 links
- github.comTypedURLs plugin(opens in new tab)
- crucialsecurity.wordpress.com/2011/03/14/typedurls-part-1/(opens in new tab)
- andreafortuna.org/2017/10/18/windows-registry-in-forensic-analysis/(opens in new tab)
- tzworks.net/prototype_page.php?proto_id=19(opens in new tab)
- forensafe.com/blogs/typedurls.html(opens in new tab)
Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)