DT127
Absence of Expected Entries in RunMRU and UserAssist - DT127
Contributor: The ITM Team @ - Detection DT127
DT128
Microsoft Purview eDiscovery - DT128
Contributor: The ITM Team @ - Detection DT128
DT129
Snipping Tool Cached Screenshots - DT129
Contributor: The ITM Team @ - Detection DT129
DT130
Snipping Tool TempState\Snips - DT130
Contributor: The ITM Team @ - Detection DT130
DT131
Snipping Tool Cached Recordings - DT131
Contributor: The ITM Team @ - Detection DT131
DT132
Snipping Tool TempState\Recordings - DT132
Contributor: The ITM Team @ - Detection DT132
DT133
Snipping Tool Autosave Setting Modification - DT133
Contributor: The ITM Team @ - Detection DT133
DT134
Python History File - DT134
Contributor: The ITM Team @ - Detection DT134
DT135
OneDrive SafeDelete.db - DT135
Contributor: The ITM Team @ - Detection DT135
DT138
Modification of etc/hosts File - DT138
Contributor: The ITM Team @ - Detection DT138