New evidence in Win...
 
Notifications
Clear all

New evidence in Windows Registry: FeatureUsage

2 Posts
2 Users
0 Reactions
1,368 Views
Bunnysniper
(@bunnysniper)
Posts: 259
Reputable Member
Topic starter
 

Hello,

I would like to draw your attention to the article below. CrowdStrike is documenting a nice, new key in the most recent version of Windows 10 (1903). It might help you during one of your investigations now or in future 🙂

https://www.crowdstrike.com/blog/how-to-employ-featureusage-for-windows-10-taskbar-forensics/

 
Posted : 19/05/2020 11:04 am
(@thefuf)
Posts: 262
Reputable Member
 
Posted by: @bunnysniper

Hello,

I would like to draw your attention to the article below. CrowdStrike is documenting a nice, new key in the most recent version of Windows 10 (1903). It might help you during one of your investigations now or in future 🙂

https://www.crowdstrike.com/blog/how-to-employ-featureusage-for-windows-10-taskbar-forensics/

Already seen some time ago: https://www.group-ib.com/blog/featureusage

 
Posted : 19/05/2020 2:11 pm
Share: