17 docs tagged with "clear-recent-activity"

This script removes the list of recently opened files in Adobe software. Adobe programs store a list of recently used files in the Windows registry. Each entry is labeled with a timestamp and includes details about the file opened at that specific time. This information can reveal a user's file activity patterns, potentially compromising privacy. By deleting these entries, the script: 1. Enhances privacy by eliminating traces of your recent file activity in Adobe programs. 2. May slightly improv...

This script removes the most recent application usage data stored by DirectX to enhance privacy. DirectX is a set of Windows components that helps software (often games and multimedia applications) to work directly with video and audio hardware. It logs the most recent application data in the system registry. Attackers exploit this information to gather insights about a target's system or network. Forensic analysts use this information to study your behavior. This script enhances your privacy by...

This script clears the history of paths you've typed in the File Explorer address bar. Windows stores recent paths entered in File Explorer (formerly known as Windows Explorer). This specifically targets paths that have been manually typed into the Address Bar. These can be file or folder locations. Windows saves up to 25 of these entries. The paths are saved upon closing the File Explorer window. This stored data includes: Full path typed • Date and time of entry This information may pose priva...

This script removes the list of recently used files in Microsoft Paint. When you open or save an image file in Paint ("mspaint.exe"), it adds the image to the File > Recent pictures history list. This list provides quick access to recently used files but also creates a record of your Paint usage. The Paint registry keys are created only after you use the application. These keys store information such as: File names of recently opened images • Dates when images were last closed • Other relate...

This script removes the history of mapped network drives from your system. Windows allows users to map network drives, which assigns a drive letter to a shared folder on a remote system. This makes accessing shared resources easier, as if they were local drives. When you map a network drive, Windows stores information about it. These stored details includes: The network path (UNC) of the mapped drive • When the drive was last accessed • Other mapped drive paths While convenient, this stored info...

This category focuses on managing Jump Lists in Windows. This feature was first introduced with Windows 7 in July 2009 and has been included in subsequent versions. These lists are found in the Start Menu or Taskbar and provide quick access to recently opened files and folders. The privacy concern with Jump Lists is their detailed recording of user activities. They store data such as file names, directory paths, MAC (Modified, Accessed, Created) timestamps, network information, volume names, and...

This script removes "CustomDestinations" Jump List files in Windows. These files are hidden and located in "%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations". "CustomDestinations" files are created by different applications to enable users to pin items such as tasks and files or applications. This includes tasks like opening a new browser window or creating a new spreadsheet, as well as files and applications frequently used. They are commonly used by web browsers and media players to store...

This script clears the "AutomaticDestinations" Jump List files in Windows. It improves user privacy by removing traces of recent file and application usage. These files are automatically created when a user opens a file or an application. They help users quickly access recently or frequently used items, usually via the Windows taskbar. They are hidden and do not appear in Windows Explorer. The files are located in "%APPDATA%\\Microsoft\\Windows\\Recent\\AutomaticDestinations". These files are identi...

This script removes the list of recently opened applications from the Windows Registry. Windows keeps track of applications used to open or save files in the "Open" and "Save" dialog boxes. This information includes: The last program used to access files in these dialogs • Timestamps of when programs were executed (in Windows Vista and later) • The order of entries, from most recently used • The folder location of the last file accessed by each application Digital forensic analysts often use thi...

This script enhances privacy by removing traces of recently accessed files and folders from the Windows system. Windows automatically tracks and stores information about files and folders accessed by users. This data is maintained in various registry keys and includes details such as file names, types, access dates, and full paths. This information persists even after the original files or folders are deleted. This data is commonly used for forensic analysis to study your behavior. It can reveal...

This script clears the recent activity history in Windows Media Player. Windows Media Player automatically stores files and URLs you recently played for easy access through the history list. It also stores recently added radio station entries. This data can be exploited by attackers to gather information about you. The script improves privacy by removing traces of your media consumption habits. It may also enhance system performance by clearing unnecessary data. This script mimics the Tools > ...

This script removes saved favorite locations in the Windows Registry Editor. The Windows Registry Editor ("regedit") allows users to save frequently accessed registry locations as favorites. This information is typically used by forensic analysts to study your behavior. Clearing these favorites removes traces of your commonly accessed registry locations, enhancing your privacy. It may also improve system performance by reducing unnecessary data in the registry. This script deletes all values und...

This script removes the record of the last visited Windows Registry key. The Windows Registry stores the location of the last key visited using "regedit.exe". This information is used to open the registry at the same location when "regedit.exe" is started again. Forensic analysts often use this data to study user behavior and activity. By clearing this information, you improve your privacy by reducing traces of your system interactions. This script may also improve system performance by reduci...

This category focuses on removing specific types of usage data from the Windows Registry to enhance privacy and improve system performance. The Windows Registry is a hierarchical database that stores settings, configurations, and options for the operating system, installed applications, and user preferences. It's like a central storage system for Windows and its programs. As users interact with their system and software, usage data and traces accumulate in the registry. This information is often...

This script clears the Most Recently Used (MRU) list in Windows Run. Windows Run is a utility that allows users to quickly open programs, files, folders, and web pages. It's also known as the Windows Run dialog box, Windows Command Window, Windows Run Box, Windows Run utility, and Windows Run window. You can access it by: Pressing Windows logo key + R • Searching for Run in the Start Menu • Running specific commands: • "explorer shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}" • `SYST...

This script clears Windows search history to enhance privacy. Windows records search keywords used on your device. This data includes search terms and dates. It's used in forensic analysis to study user behavior. Clearing search history improves privacy by removing this potentially sensitive information. It may also improve system performance by freeing up storage space. Technical Details - The script enhances privacy by deleting this tracking information from the following locations: Used by Wi...

This script removes the most recently used (MRU) file list from WordPad, enhancing user privacy. WordPad stores the names and paths of recently opened files. Unlike Microsoft Office Word, WordPad doesn't offer a built-in feature to clear this list. This data can be used in forensic investigations to analyze user behavior. The stored information includes: File Name: The name of the file opened in WordPad • File Path: The complete path to the file • File Modified Date/Time: When the MR...