| Plugin | Hive | What it gives |
|---|---|---|
| typedurls | NTUSER.DAT | Typed URLs |
| typedurlstime | NTUSER.DAT | URL timestamps |
| searchscopes | NTUSER.DAT | Search providers |
| attachmgr | NTUSER.DAT | Download trust / attachment handling |
| onedrive | NTUSER.DAT | OneDrive usage |
| adobe | NTUSER.DAT | Adobe recent files |
BLUE TEAM / DFI / ARTEFACT / WINDOWS / REGISTRY / RegRipper