![[read only]](https://pbs.twimg.com/profile_images/378800000778979413/f3c579f7d8bd135b99d553b773fc8de2_normal.png)
I wonder if this data is only kept on the disk temporarily before it’s sent to Microsoft events service. It may not actually be useful in real life...
Prikaži ovu nit
#DFIR #IR
I think I’ve discovered Win32 application launch history / usage trace data that appears undocumented by the community. It logs 3rd-party apps too.
Win32kTraceLogging.AppInteractivitySummary
See Microsoft’s “Diagnostic Data Viewer” app.
A massive trove of data pointspic.twitter.com/zLtDTliJ98
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
No wonder things are so slow when Windows is counting all this.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
TZ -6? Where the heck are you, ohio?
-
I assume the Tay is at Amunsden-Scott and can therefore be in any timezone they like.
- Još 1 odgovor
Novi razgovor -
-
-
Thank you.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Assuming O&O ShutUp10 or Windows Privacy Dashboard can block this? Both free tools.
https://www.oo-software.com/en/shutup10
https://wpd.app/ -
W10Privacy tool is really awesome.
Kraj razgovora
Novi razgovor -
-
-
Jezus. Sometimes I just sit and wonder what the hell the CPU is doing.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.