Windows ‘Fun’ Stuff

Locations

A set of juicy locations to investigate when trying to exploit a windows machine.

C:\
C:\users’user’\documents
c:\windows\system32\config

Scheduled Tasks

Task scheduler creates files in 2 locations:

• C:\Windows\Tasks (legacy)

• C:\Windows\System32\Tasks

---