mru.networkdrive
#
$ target-query <path/to/target> -f mru.networkdrive
Module |
|
Output |
|
Module documentation
Return MRU data stored at various registry keys.
The Windows registry contains various keys about Most Recently Used (MRU) files.
- References:
Function documentation
Return MRU of mapped network drives.
The HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerMap Network Drive MRU registry key contains information about the most recently used mapped network drives.