Windows Artefacts

Shows machine-wide COM registrations with CLSIDs, descriptions, executables, redirects, and registry metadata.

Shows per-user COM registrations with CLSIDs, descriptions, executables, redirects, and registry metadata.

Shows raw Windows Registry keys and values with modification times, data types, owners, and access controls.

Shows Windows shortcut and Jump List targets, arguments, timestamps, volume data, link flags, and extra metadata.

Shows Windows object-manager entries with types, namespace paths, symbolic-link targets, and creation times.

Shows SRUM battery energy events with state transitions, capacity, charge level, cycle count, and timestamps.

Shows long-term SRUM energy estimates by application, user, power source, activity state, and capacity.

Shows SRUM tagged-energy records with application, user, and timestamp identifiers for correlation.

Shows SRUM VFU provider records with application, user, and timestamp identifiers for correlation.

Shows SRUM push-notification activity with application, user, notification type, payload size, and network type.