Merge pull request #71 from vxsh4d0w/master

Update DFIRBatch.reb
EricZimmerman · Sep 2, 2024 · 8ec7122 · 8ec7122
2 parents 1107859 + 0f749ab
commit 8ec7122
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/BatchExamples/DFIRBatch.reb b/BatchExamples/DFIRBatch.reb
@@ -2532,6 +2532,30 @@ Keys:
         Recursive: true
         Comment: "Displays settings related to Macrium Reflect's interaction with VSS"
 
+# Third Party Applications -> MobaXTerm - https://www.mobatek.net/
+
+    -
+        Description: MobaXTerm
+        HiveType: SOFTWARE
+        Category: Third Party Applications
+        KeyPath: Software\Mobatek\MobaXterm\M
+        Recursive: false
+        Comment: "MobaXTerm Master Password Registry Key"
+    -
+        Description: MobaXTerm
+        HiveType: SOFTWARE
+        Category: Third Party Applications
+        KeyPath: Software\Mobatek\MobaXterm\P
+        Recursive: false
+        Comment: "MobaXTerm Passwords Registry Key"
+    -
+        Description: MobaXTerm
+        HiveType: SOFTWARE
+        Category: Third Party Applications
+        KeyPath: Software\Mobatek\MobaXterm\C
+        Recursive: false
+        Comment: "MobaXTerm Credentials Registry Key"
+
 # Third Party Applications -> WinSCP - https://winscp.net/eng/index.php
 
     -