Get-BluGenieMRUActivityView

﻿
Get-BluGenieMRUActivityView
SYNOPSIS
Query MRU Activity
SYNTAX
Get-BluGenieMRUActivityView [[-ReturnObject]] [[-Walkthrough]] [<CommonParameters>]
DESCRIPTION
Query MRU Activity. Pull all known MRU information from the following location.
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU' 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRULegacy' 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\FirstFolder' 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU' 'HKEY_CURRENT_USER\Software\IvoSoft\ClassicStartMenu\MRU' 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs'
EXAMPLES
EXAMPLE 1
Get-BluGenieMRUActivityView
This will return all MRU Information for the following locations.
​
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU'
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRULegacy'
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\FirstFolder'
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU'
'HKEY_CURRENT_USER\Software\IvoSoft\ClassicStartMenu\MRU'
'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs'
EXAMPLE 2
Invoke-LoadAllProfileHives -ReturnObject
This will return all MRU Information.
The returned data will be an Object
PARAMETERS
ReturnObject
-ReturnObject [<SwitchParameter>]
   Return information as an Object.
   By default the data is returned as a Hash Table
   
   <Type>SwitchParameter<Type>
   
   Required?                    false
   Position?                    1
   Default value                False
   Accept pipeline input?       false
   Accept wildcard characters?  false
Walkthrough
-Walkthrough [<SwitchParameter>]
   
   Required?                    false
   Position?                    2
   Default value                False
   Accept pipeline input?       false
   Accept wildcard characters?  false
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Get-BluGenieLockingProcess

Get-BluGenieProcessList

Last modified 1yr ago