drop msi log files or software registry exports · reconstruct software installation history · identify recently installed tools · detect silent installations · msiexec evidence · flag security-relevant installs · runs locally
artifacts
drop msi / reg / csv
or click
drop msi logs · .reg uninstall exports · evtx csv