✏️Windows Registry Interesting Keys
System
Interface de rede
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\InterfacesSoftware
Placa de rede
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards\NetworkCard\{Número}Current User
Histórico de comandos Powershell
C:\Users\{USER}\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txtPapel de parede de um usuário
C:\Users\{USER}\NTUSER.DAT -> Control Panel -> Desktop -> WallPaperLast updated