Detections
Analytics

BagMRU Folder History

info Nessus Plugin ID 92416

Language:

Synopsis

Nessus was able to enumerate folders that were opened in Windows Explorer.

Description

Nessus was able to enumerate folders that were opened in Windows Explorer. Microsoft Windows maintains folder settings using a registry key known as shellbags or BagMRU. The generated folder list report contains folders local to the system, folders from past mounted network drives, and folders from mounted devices.

See Also

http://www.williballenthin.com/forensics/shellbags/

http://www.nessus.org/u?db25594f

Plugin Details

Severity: Info

ID: 92416

File Name: microsoft_windows_bagmru.nasl

Version: 1.5

Type: local

Agent: windows

Family: Windows

Published: 7/19/2016

Updated: 5/23/2018

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated