Update File_and_Directory_Discovery.md

Adding more commands taken from Waterbug/Turla
2018-01-11 17:09:24 +07:00 · 2018-01-11 17:09:24 +07:00 · a85093767d
parent 543cae5b60
commit a85093767d
1 changed files with 3 additions and 0 deletions
--- a/Windows/Discovery/File_and_Directory_Discovery.md
+++ b/Windows/Discovery/File_and_Directory_Discovery.md
@ -10,3 +10,6 @@ Input:
    dir /s "c:\Documents and Settings" >> %temp%\download
    dir /s "c:\Program Files\" >> %temp%\download
    dir /s d:\ >> %temp%\download
+    dir "%systemdrive%\Users\*.*"
+    dir "%userprofile%\AppData\Roaming\Microsoft\Windows\Recent\*.*"
+    dir "%userprofile%\Desktop\*.*"