Directories ¶ Show internal Expand all Path Synopsis applications chrome_extension_content_scripts chrome_extensions office_mru vscode_extensions cloud azure_instance_metadata azure_instance_tags ec2_instance_metadata ec2_instance_tags ycloud_instance_metadata events ntfs_journal_events powershell_events windows_events forensic carves networking arp_cache connectivity curl curl_certificate etc_hosts etc_protocols etc_services interface_addresses interface_details listening_ports process_open_sockets routes windows_firewall_rules system appcompat_shims authenticode autoexec background_activities_moderator bitlocker_info certificates chassis_info chocolatey_packages cpu_info cpuid default_environment deviceguard_status disk_info dns_cache drivers groups hash ie_extensions kernel_info kva_speculative_info logged_in_users logical_drives logon_sessions memory_devices ntdomains ntfs_acl_permissions os_version patches physical_disk_performance pipes platform_info prefetch process_memory_map processes programs python_packages registry scheduled_tasks security_profile_info services shared_resources shellbags shimcache ssh_configs startup_items system_info tpm_info uptime user_groups user_ssh_keys userassist users video_info winbaseobj windows_crashes windows_eventlog windows_optional_features windows_search windows_security_center windows_security_products windows_update_history wmi_bios_info wmi_cli_event_consumers wmi_event_filters wmi_filter_consumer_binding wmi_script_event_consumers utility file time Click to show internal directories. Click to hide internal directories.