- Chrome
- Edge
- IE
- $MFT
- $LogFile
- $UsnJrnl
- RecentDocs
- OfficeRecentFiles
- HWPRecentFiles
- Shortcut(LNK) Files
- JumpLists
- Prefetch
- PowerShell Event
- Succes/Fail Logons
- RDP Usage
- Windows Defender
- 실행프로그램
- 스케쥴러
- 시스템 시간조작
- WER
- RecycleBin
- Registry - x
- Amcache - x
- ActivitiesCache.db - x