From e1824a8756f8dcece365cabff7ecefcbed627ed6 Mon Sep 17 00:00:00 2001 From: rahmatnurfauzi Date: Thu, 11 Jan 2018 17:04:47 +0700 Subject: [PATCH] Update File_and_Directory_Discovery.md Adding more commands taken from Waterbug/Turla --- Windows/Discovery/File_and_Directory_Discovery.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Windows/Discovery/File_and_Directory_Discovery.md b/Windows/Discovery/File_and_Directory_Discovery.md index b440247..dcd68c6 100644 --- a/Windows/Discovery/File_and_Directory_Discovery.md +++ b/Windows/Discovery/File_and_Directory_Discovery.md @@ -10,3 +10,9 @@ Input: dir /s "c:\Documents and Settings" >> %temp%\download dir /s "c:\Program Files\" >> %temp%\download dir /s d:\ >> %temp%\download + dir %systemdrive%\Users\*.* + dir %userprofile%\AppData\Roaming\Microsoft\Windows\Recent\*.* + dir %userprofile%\Desktop\*.* + dir “%programfiles(x86)%” + dir “%programfiles%” + dir %appdata%