drop registry exports or autoruns csv · suspicion score 0–100 · encoded powershell decode · csv export · runs locally
autorun inputs
drop .reg, Autoruns CSV, or plain-text startup list
or click
scans Run keys, services, Winlogon, AppInit, BHO, BootExecute, and Autoruns columns
drop .reg exports or Sysinternals Autoruns CSV