> For the complete documentation index, see [llms.txt](https://manuals.blusapphire.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://manuals.blusapphire.io/blugenie.md).

# BluGenie

- [Full Function List](https://manuals.blusapphire.io/blugenie/full-function-list.md)
- [Add-BluGenieFirewallRule](https://manuals.blusapphire.io/blugenie/full-function-list/add-blugeniefirewallrule.md)
- [Clear-BlugenieMemory](https://manuals.blusapphire.io/blugenie/full-function-list/clear-blugeniememory.md)
- [Connect-BluGenieToSystem](https://manuals.blusapphire.io/blugenie/full-function-list/connect-blugenietosystem.md)
- [Convert-BluGenieSID2UserName](https://manuals.blusapphire.io/blugenie/full-function-list/convert-blugeniesid2username.md)
- [Convert-BluGenieSize](https://manuals.blusapphire.io/blugenie/full-function-list/convert-blugeniesize.md)
- [Convert-BluGenieUserName2SID](https://manuals.blusapphire.io/blugenie/full-function-list/convert-blugenieusername2sid.md)
- [Convert-BluGenieUTCtoLocal](https://manuals.blusapphire.io/blugenie/full-function-list/convert-blugenieutctolocal.md)
- [ConvertFrom-Yaml](https://manuals.blusapphire.io/blugenie/full-function-list/convertfrom-yaml.md)
- [ConvertTo-BluGenieDate](https://manuals.blusapphire.io/blugenie/full-function-list/convertto-blugeniedate.md)
- [ConvertTo-Yaml](https://manuals.blusapphire.io/blugenie/full-function-list/convertto-yaml.md)
- [Disable-BluGenieAllFirewallRules](https://manuals.blusapphire.io/blugenie/full-function-list/disable-blugenieallfirewallrules.md)
- [Disable-BluGenieFirewallRule](https://manuals.blusapphire.io/blugenie/full-function-list/disable-blugeniefirewallrule.md)
- [Enable-BluGenieAllFirewallRules](https://manuals.blusapphire.io/blugenie/full-function-list/enable-blugenieallfirewallrules.md)
- [Enable-BluGenieFirewallRule](https://manuals.blusapphire.io/blugenie/full-function-list/enable-blugeniefirewallrule.md)
- [Enable-BluGenieWinRMoverWMI](https://manuals.blusapphire.io/blugenie/full-function-list/enable-blugeniewinrmoverwmi.md)
- [Expand-BluGenieArchivePS2](https://manuals.blusapphire.io/blugenie/full-function-list/expand-blugeniearchiveps2.md)
- [Format-BluGenieEvent](https://manuals.blusapphire.io/blugenie/full-function-list/format-blugenieevent.md)
- [Get-BluGenieADGroupMembers](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieadgroupmembers.md)
- [Get-BluGenieADGroups](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieadgroups.md)
- [Get-BluGenieADMachineInfo](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieadmachineinfo.md)
- [Get-BluGenieAuditProcessTracking](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieauditprocesstracking.md)
- [Get-BluGenieAutoRuns](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieautoruns.md)
- [Get-BluGenieChildItemList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniechilditemlist.md)
- [Get-BluGenieCOMObjectInfo](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniecomobjectinfo.md)
- [Get-BluGenieCurrentSessionAliases](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniecurrentsessionaliases.md)
- [Get-BluGenieCurrentSessionFunctions](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniecurrentsessionfunctions.md)
- [Get-BluGenieCurrentSessionVariables](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniecurrentsessionvariables.md)
- [Get-BluGenieErrorAction](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieerroraction.md)
- [Get-BluGenieFileADS](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniefileads.md)
- [Get-BluGenieFilePermissions](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniefilepermissions.md)
- [Get-BluGenieFileSnapshot](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniefilesnapshot.md)
- [Get-BluGenieFileStreams](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniefilestreams.md)
- [Get-BluGenieFirewallRules](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniefirewallrules.md)
- [Get-BluGenieHashInfo](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniehashinfo.md)
- [Get-BluGenieHelp](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniehelp.md)
- [Get-BluGenieHostingVersion](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniehostingversion.md)
- [Get-BluGenieIPrange](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieiprange.md)
- [Get-BluGenieLiteralPath](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieliteralpath.md)
- [Get-BluGenieLoadedRegHives](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieloadedreghives.md)
- [Get-BluGenieLockingProcess](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenielockingprocess.md)
- [Get-BluGenieMRUActivityView](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniemruactivityview.md)
- [Get-BluGenieProcessList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieprocesslist.md)
- [Get-BluGenieRegistry](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieregistry.md)
- [Get-BluGenieRegistryProcessTracking](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieregistryprocesstracking.md)
- [Get-BluGenieRegSnapshot](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieregsnapshot.md)
- [Get-BluGenieRunSpaceSessionAliases](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenierunspacesessionaliases.md)
- [Get-BluGenieRunSpaceSessionFunctions](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenierunspacesessionfunctions.md)
- [Get-BluGenieRunSpaceSessionVariables](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenierunspacesessionvariables.md)
- [Get-BluGenieSchTaskInfo](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieschtaskinfo.md)
- [Get-BluGenieScriptDirectory](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniescriptdirectory.md)
- [Get-BluGenieServiceList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieservicelist.md)
- [Get-BluGenieServiceStatus](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenieservicestatus.md)
- [Get-BluGenieSessionAliasList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesessionaliaslist.md)
- [Get-BluGenieSessionFunctionList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesessionfunctionlist.md)
- [Get-BluGenieSessionVariableList](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesessionvariablelist.md)
- [Get-BluGenieSettings](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesettings.md)
- [Get-BluGenieSignature](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesignature.md)
- [Get-BluGenieSystemInfo](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniesysteminfo.md)
- [Get-BluGenieToolsDirectory](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenietoolsdirectory.md)
- [Get-BluGenieTranscriptsDir](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenietranscriptsdir.md)
- [Get-BluGenieTranscriptsFile](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenietranscriptsfile.md)
- [Get-BluGenieTrapData](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugenietrapdata.md)
- [Get-BluGenieWindowsTitle](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniewindowstitle.md)
- [Get-BluGenieWindowsUpdates](https://manuals.blusapphire.io/blugenie/full-function-list/get-blugeniewindowsupdates.md)
- [Install-BluGenieHarvester](https://manuals.blusapphire.io/blugenie/full-function-list/install-blugenieharvester.md)
- [Install-BluGenieSysMon](https://manuals.blusapphire.io/blugenie/full-function-list/install-blugeniesysmon.md)
- [Invoke-BluGenieAnalyzer](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieanalyzer.md)
- [Invoke-BluGenieFileBrowser](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniefilebrowser.md)
- [Invoke-BluGenieLoadAllProfileHives](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieloadallprofilehives.md)
- [Invoke-BluGenieNetStat](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenienetstat.md)
- [Invoke-BluGenieParallel](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieparallel.md)
- [Invoke-BluGenieProcess](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieprocess.md)
- [Invoke-BluGenieProcessHash](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieprocesshash.md)
- [Invoke-BluGeniePSQuery](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniepsquery.md)
- [Invoke-BluGeniePython](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniepython.md)
- [Invoke-BluGenieSQLLQuery](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniesqllquery.md)
- [Invoke-BluGenieThreadLock](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniethreadlock.md)
- [Invoke-BluGenieUnLoadAllProfileHives](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieunloadallprofilehives.md)
- [Invoke-BluGenieWalkThrough](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniewalkthrough.md)
- [Invoke-BluGenieWipe](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugeniewipe.md)
- [Invoke-BluGenieYara](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-blugenieyara.md)
- [Invoke-PSipcalc](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-psipcalc.md)
- [Invoke-PSnmap](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-psnmap.md)
- [Invoke-SQLiteBulkCopy](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-sqlitebulkcopy.md)
- [Invoke-SqliteQuery](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-sqlitequery.md)
- [Invoke-WalkThrough](https://manuals.blusapphire.io/blugenie/full-function-list/invoke-walkthrough.md)
- [Join-BluGenieObjects](https://manuals.blusapphire.io/blugenie/full-function-list/join-blugenieobjects.md)
- [New-BluGenieCommand](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugeniecommand.md)
- [New-BluGenieHelpMenu](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugeniehelpmenu.md)
- [New-BluGenieService](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugenieservice.md)
- [New-BluGenieSessionInfo](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugeniesessioninfo.md)
- [New-BluGenieTimeStamp](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugenietimestamp.md)
- [New-BluGenieUID](https://manuals.blusapphire.io/blugenie/full-function-list/new-blugenieuid.md)
- [New-SQLiteConnection](https://manuals.blusapphire.io/blugenie/full-function-list/new-sqliteconnection.md)
- [Open-BluGenieLog](https://manuals.blusapphire.io/blugenie/full-function-list/open-blugenielog.md)
- [Open-BluGenieLogDir](https://manuals.blusapphire.io/blugenie/full-function-list/open-blugenielogdir.md)
- [Open-BluGenieScriptDir](https://manuals.blusapphire.io/blugenie/full-function-list/open-blugeniescriptdir.md)
- [Open-BluGenieToolDir](https://manuals.blusapphire.io/blugenie/full-function-list/open-blugenietooldir.md)
- [Open-BluGenieTransDir](https://manuals.blusapphire.io/blugenie/full-function-list/open-blugenietransdir.md)
- [Out-DataTable](https://manuals.blusapphire.io/blugenie/full-function-list/out-datatable.md)
- [Publish-BluGenieArtifact](https://manuals.blusapphire.io/blugenie/full-function-list/publish-blugenieartifact.md)
- [Publish-BluGenieFirewallRules](https://manuals.blusapphire.io/blugenie/full-function-list/publish-blugeniefirewallrules.md)
- [Remove-BluGenieFile](https://manuals.blusapphire.io/blugenie/full-function-list/remove-blugeniefile.md)
- [Remove-BluGenieFirewallRule](https://manuals.blusapphire.io/blugenie/full-function-list/remove-blugeniefirewallrule.md)
- [Remove-BluGenieModule](https://manuals.blusapphire.io/blugenie/full-function-list/remove-blugeniemodule.md)
- [Remove-BluGenieService](https://manuals.blusapphire.io/blugenie/full-function-list/remove-blugenieservice.md)
- [Resolve-BluGenieDnsName](https://manuals.blusapphire.io/blugenie/full-function-list/resolve-blugeniednsname.md)
- [Send-BluGenieItem](https://manuals.blusapphire.io/blugenie/full-function-list/send-blugenieitem.md)
- [Set-BluGenieAuditProcessPol](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieauditprocesspol.md)
- [Set-BluGenieCommands](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniecommands.md)
- [Set-BluGenieCores](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniecores.md)
- [Set-BluGenieDebugger](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniedebugger.md)
- [Set-BluGenieFirewallGPOStatus](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniefirewallgpostatus.md)
- [Set-BluGenieFirewallStatus](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniefirewallstatus.md)
- [Set-BluGenieJobId](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniejobid.md)
- [Set-BluGenieJobMemory](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniejobmemory.md)
- [Set-BluGenieJobTimeout](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniejobtimeout.md)
- [Set-BluGenieNoBanner](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenienobanner.md)
- [Set-BluGenieNoExit](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenienoexit.md)
- [Set-BluGenieNoSetRes](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenienosetres.md)
- [Set-BluGenieParallelCommands](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieparallelcommands.md)
- [Set-BluGeniePostCommands](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniepostcommands.md)
- [Set-BluGeniePrefetch](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieprefetch.md)
- [Set-BluGenieProcessCPUAffinity](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieprocesscpuaffinity.md)
- [Set-BluGenieProcessPriority](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieprocesspriority.md)
- [Set-BluGenieRange](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenierange.md)
- [Set-BluGenieRemoteDesktopProcess](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieremotedesktopprocess.md)
- [Set-BluGenieScriptCredentials](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniescriptcredentials.md)
- [Set-BluGenieServiceJob](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieservicejob.md)
- [Set-BluGenieSessionInfo](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniesessioninfo.md)
- [Set-BluGenieSettingsPriority](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniesettingspriority.md)
- [Set-BluGenieSystems](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniesystems.md)
- [Set-BluGenieThreadCount](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugeniethreadcount.md)
- [Set-BluGenieTrapping](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenietrapping.md)
- [Set-BluGenieUpdateMods](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieupdatemods.md)
- [Set-BluGenieVerbose](https://manuals.blusapphire.io/blugenie/full-function-list/set-blugenieverbose.md)
- [Show-BluGenieGUI](https://manuals.blusapphire.io/blugenie/full-function-list/show-blugeniegui.md)
- [Show-BluGenieMore](https://manuals.blusapphire.io/blugenie/full-function-list/show-blugeniemore.md)
- [Start-BluGenieNewProcess](https://manuals.blusapphire.io/blugenie/full-function-list/start-blugenienewprocess.md)
- [Start-BluGenieRunSpace](https://manuals.blusapphire.io/blugenie/full-function-list/start-blugenierunspace.md)
- [Stop-BluGenieService](https://manuals.blusapphire.io/blugenie/full-function-list/stop-blugenieservice.md)
- [Test-BluGenieIsFileLocked](https://manuals.blusapphire.io/blugenie/full-function-list/test-blugenieisfilelocked.md)
- [Test-BluGenieIsMutexAvailable](https://manuals.blusapphire.io/blugenie/full-function-list/test-blugenieismutexavailable.md)
- [Trace-BluGenieFireWallStatus](https://manuals.blusapphire.io/blugenie/full-function-list/trace-blugeniefirewallstatus.md)
- [Update-BluGenieFirewallProfileStatus](https://manuals.blusapphire.io/blugenie/full-function-list/update-blugeniefirewallprofilestatus.md)
- [Update-BluGenieSysinternals](https://manuals.blusapphire.io/blugenie/full-function-list/update-blugeniesysinternals.md)
- [Update-Sqlite](https://manuals.blusapphire.io/blugenie/full-function-list/update-sqlite.md)
- [Write BluGenieVerboseMsg](https://manuals.blusapphire.io/blugenie/full-function-list/write-blugenieverbosemsg.md)
- [Functions by Category](https://manuals.blusapphire.io/blugenie/functions-by-category.md)
- [Discovery](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery.md)
- [Registry](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/registry.md)
- [File/Folder](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/file-folder.md)
- [Process](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/process.md)
- [System](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/system.md)
- [Network](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/network.md)
- [ActiveDirectory](https://manuals.blusapphire.io/blugenie/functions-by-category/discovery/activedirectory.md)
- [Execution](https://manuals.blusapphire.io/blugenie/functions-by-category/execution.md)
- [Registry](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/registry.md)
- [File/Folder](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/file-folder.md)
- [Process](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/process.md)
- [System](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/system.md)
- [Network](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/network.md)
- [Tools](https://manuals.blusapphire.io/blugenie/functions-by-category/execution/tools.md)
- [Support](https://manuals.blusapphire.io/blugenie/functions-by-category/support.md)
- [Artifacts](https://manuals.blusapphire.io/blugenie/artifacts.md)
- [Example Template](https://manuals.blusapphire.io/blugenie/artifacts/example-template.md)
- [Tactical Artifacts by Category](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category.md)
- [Combination Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/combination-query.md)
- [Query Autorun locations for any item nested that is not digitally signed](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/combination-query/query-autorun-locations-for-any-item-nested-that-is-not-digitally-signed.md): AID2201221238.YAML
- [EventLog Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query.md)
- [Query for Process execution from unusual directories](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-for-process-execution-from-unusual-directories.md): AID2201222048.yaml
- [Query suspicious programs processed by the Task Scheduler using the Event Log](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-suspicious-programs-processed-by-the-task-scheduler-using-the-event-log.md): AID2201251952.YAML
- [Query for unusual instances of rundll32.exe via the Event Log](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-for-unusual-instances-of-rundll32.exe-via-the-event-log.md)
- [Query for Unusual Instances of rundll32.exe making outbound network connections using SysMon Data](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-for-unusual-instances-of-rundll32.exe-making-outbound-network-connections-using-sysmon-data.md): AID2201251645.YAML
- [Query Suspicious Powershell Command Line Executions](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-suspicious-powershell-command-line-executions.md): AID2201251845.YAML
- [Query the Windows System Log for 104, 517, 1102](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/eventlog-query/query-the-windows-system-log-for-104-517-1102.md): AID2201232238.YAML
- [File and Folder Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/file-and-folder-query.md)
- [Query for malicious file types in all users and system temp directories](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/file-and-folder-query/query-for-malicious-file-types-in-all-users-and-system-temp-directories.md): AID2201202326.YAML
- [Query Malicious file types from any directory not including the default OS and Install directories](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/file-and-folder-query/query-malicious-file-types-from-any-directory-not-including-the-default-os-and-install-directories.md): AID2201220858.YAML
- [Query all users for their Powershell Profile content for Powershell, Powershell\_ISE, and VS Code](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/file-and-folder-query/query-all-users-for-their-powershell-profile-content-for-powershell-powershell_ise-and-vs-code.md): AID2201232312.YAML
- [Query to Determine if any lolbin files are installed outside the normal OS and Program Files dir's](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/file-and-folder-query/query-to-determine-if-any-lolbin-files-are-installed-outside-the-normal-os-and-program-files-dirs.md): AID2201232312.YAML
- [Network Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/network-query.md)
- [Query for Unusual Windows Network Activity](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/network-query/query-for-unusual-windows-network-activity.md): AID2201222121.YAML
- [Process Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/process-query.md)
- [Query for all Processes not running from the Windows and Program Files.\* Directories](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/process-query/query-for-all-processes-not-running-from-the-windows-and-program-files.-directories.md)
- [Registry Query](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query.md)
- [Query Information from the Registry on Recentdocs, Recentapps](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-information-from-the-registry-on-recentdocs-recentapps.md): AID2112301441.YAML
- [Query Registry for a list of mounted USB storage devices, including external memory cards](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-registry-for-a-list-of-mounted-usb-storage-devices-including-external-memory-cards.md): AID2112302000.YAML
- [Query the Most Recently Used items from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-most-recently-used-items-from-the-registry.md): AID2112302008.YAML
- [Query the Most Recently Open and Saved File information from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-most-recently-open-and-saved-file-information-from-the-registry.md): AID2112302009.YAML
- [Query all Run, RunOnce, and RunOnceEx Registry Keys](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-all-run-runonce-and-runonceex-registry-keys.md): AID2112302012.YAML
- [Query Command list from the MRU Registry List](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-command-list-from-the-mru-registry-list.md): AID2112302013.YAML
- [Query Startup Services from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-startup-services-from-the-registry.md): AID2112302014.YAML
- [Query Map Network Drives from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-map-network-drives-from-the-registry.md): AID2112302017.YAML
- [Query Shell Folders and User Shell Folders from both the HKLM and HKU Registry Information](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-shell-folders-and-user-shell-folders-from-both-the-hklm-and-hku-registry-information.md)
- [Query Typed Urls from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-typed-urls-from-the-registry.md): AID2112302023.YAML
- [Query Current Control Set Services information from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-current-control-set-services-information-from-the-registry.md): AID2112302027.YAML
- [Query Accessibility Features from Image File Execution Options from the Registry](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-accessibility-features-from-image-file-execution-options-from-the-registry.md): AID2112302043.YAML
- [Query the Registry for Commands that are automatically executed each time cmd.exe is run](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-commands-that-are-automatically-executed-each-time-cmd.exe-is-run.md): AID2112302048.YAML
- [Query the Registry for Mounted Device information](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-mounted-device-information.md): AID2112302049.YAML
- [Query the Registry for Browser Helper Objects (BHO)](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-browser-helper-objects-bho.md): AID2112302103.YAML
- [Query the Registry for Explore Run commands](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-explore-run-commands.md): AID2112302128.YAML
- [Query the Registry for Winlogon Helper Dll's](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-winlogon-helper-dlls.md): AID2112302152.YAML
- [Query the Registry for Active Setup information](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-active-setup-information.md): AID2201032000.YAML
- [Query the Registry for Bypassing UAC Mechanisms from the User-Accessible information](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-bypassing-uac-mechanisms-from-the-user-accessible-information.md): AID2201032010.YAML
- [Query the Registry for User-Logon, and Startup Scripts](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-user-logon-and-startup-scripts.md): AID2201032020.YAML
- [Query the Registry for the most common MRU information for All User Hives, including offline users](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-the-most-common-mru-information-for-all-user-hives-including-offline-users.md): AID2201202337.YAML
- [Query the Registry for any user, using the SysInternals Tools](https://manuals.blusapphire.io/blugenie/artifacts/tactical-artifacts-by-category/registry-query/query-the-registry-for-any-user-using-the-sysinternals-tools.md)