Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Admin.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx
6928a205f7cc03a7f6cfab4afe93ab4b 55e36bcab88db2507e70d5b4df71cbfa8ce8bed1 [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
bfb71692b4926e3999c96d7118d8f1f8 1dfb96e154f939c33caf30e4d8d530a79ff088f4 [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx
f495ad633e310443613cf314b89516ce 7a0acc56f002282a8a0ec1ff850db8a1a6d8362a [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
7fd6f2b79f2ebe9ca783ee5d6af375fc 4b811d0dc85d559ed5dc2f9e3769934be3c8fb8d [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx
7d628406b0a44be6c9c80573ac814d60 d50a2190edcafa374206827cd0db1db6589d3fd6 [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx
318871c85c91b974adf527f460d53cf5 6b5f8757445c8b102ce2ee01401f4e5f8ac91d5c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
0921aabe2f61c06a9e97d1b39cceff55 00220290a0ec85a7af0fdffc8723c12f20ea6aab [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
3d0efc18e2b5429742592da7396e2460 6a665f9df775fa6a08f4f5b04aef1d2fbbc52afb [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx
027f71ceee47495288ed417fb4dbd265 8eeeffa384335b81395cf1ff83da362fad7375ac [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Initialization.evtx
a20cc43ab4dcc847d87fb4220c1df049 c7b8ee1bbf4b44688cac458d370e82566e29c5b0 [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx
e0646bbc23179679c925e94e7c074f12 7bbb6137213f431296d06e17d28ea02297d3de9e [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx
540b65dc57148f0d0faa8a3346bb68ce b5a6155e744701d266af0d26a128af58b146df8c [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx
d0a62ca42693f54be8afb877beb28c5a e61bc5c21327c66031f3b2f89da791313c2a9c07 [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx
750cb6e44397d67d52694b1c20a5782a 229412898990c1d70c16a9cfff8cbc1fb9847e8e [NTFS]\[root]\Windows\System32\winevt\Logs\Microsoft-Windows-Time-Service%4Operational.evtx