Application-Execution

Task Bar Feature Usage

System Resource Usage Monitor (SRUM)

Run Dialog Usage

Last Visited MRU

Capability Access Manager

Win10 Timeline

Jumplists

BAM and DAM

Amcache

Userassist

Shimcache/AppCompatCache

Prefetch

Cloud-Storage

Onedrive Artifacts

Google Drive For Desktop Artifacts

Dropbox Artifacts

Box Drive Artifacts

Network-Activity-and-Physical-Location

SRUM (Network Activity)

Network Interfaces

WLAN Event Log

Timezone

Network History

Browser URL Parameters

System-Information

System Last Shutdown Time

System Boot and Autostart Programs

Operating System Version

Computer Name

Account-Usage

Logon Event Types

Last Login and Password Change

Cloud Account Details

Authentication Events