Update File_and_Directory_Discovery.md

Adding more commands taken from Waterbug/Turla
2018-01-11 17:04:47 +07:00 · 2018-01-11 17:04:47 +07:00 · e1824a8756
parent dcccde9adc
commit e1824a8756
1 changed files with 6 additions and 0 deletions
--- a/Windows/Discovery/File_and_Directory_Discovery.md
+++ b/Windows/Discovery/File_and_Directory_Discovery.md
@ -10,3 +10,9 @@ Input:
    dir /s "c:\Documents and Settings" >> %temp%\download
    dir /s "c:\Program Files\" >> %temp%\download
    dir /s d:\ >> %temp%\download
+    dir %systemdrive%\Users\*.*
+    dir %userprofile%\AppData\Roaming\Microsoft\Windows\Recent\*.*
+    dir %userprofile%\Desktop\*.*
+    dir “%programfiles(x86)%”
+    dir “%programfiles%”
+    dir %appdata%