Windows Forensic Cheat Sheet

winver : get windows version

systeminfo : To get all informations about the system

net user <username>            : To get a user's full details

RUN :-

lusrmgr.msc                     :usermanger (To get all info about the users)

regedit                             :Registry Editor

Eventviewer :-

To get all the events occured/occuring in the windows system

Task scheduler :-

To get the informations about sheduled tasks

mimikatz :-

Tool used to get Windows passwords