A few reg keys which you may find useful to find out what someone has been doing on your machine.
reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMR
reg query “hkcu\software\microsoft\internet explorer\typedurls”
reg query hkcu\software\realvnc\vncviewer4\mru
Get to this reg key via the regedit GUI (via run / regedit)
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.doc
Rick Donato is a Network Automation Architect/Evangelist and the founder of Packet Coders.
Latest posts by Rick Donato (see all)
- NETCONF & YANG: Automate Network Configs via Python - April 2, 2026
- Palo Alto – How to Configure Your Next-Generation Firewall - April 2, 2026
- How to Harden Linux SSH: Keys, Fail2ban & Ciphers - March 1, 2026
Want to become a Windows expert?
Here is our hand-picked selection of the best courses you can find online:
Windows Server 2022 Administration course
Windows 10 Troubleshooting course
and our recommended certification practice exams:
Delta Practice Tests