fir3net
PPS-Firenetbanner-780.5x190-30-03-17

What have you been doing on my machine ?

A few reg keys which you may find useful to find out what someone has been doing on your machine.

reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMR
reg query "hkcu\software\microsoft\internet explorer\typedurls"
reg query hkcu\software\realvnc\vncviewer4\mru

Get to this reg key via the regedit GUI (via run / regedit)

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.doc 

About the Author

RDonato

R Donato

Rick Donato is the Founder and Chief Editor of Fir3net.com. He currently works as a Principal Network Security Engineer and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001