BagMRU Folder History

Info Nessus Plugin ID 92416

Synopsis

Nessus was able to enumerate folders that were opened in Windows Explorer.

Description

Nessus was able to enumerate folders that were opened in Windows Explorer. Microsoft Windows maintains folder settings using a registry key known as shellbags or BagMRU. The generated folder list report contains folders local to the system, folders from past mounted network drives, and folders from mounted devices.

Solution

n/a

See Also

http://www.williballenthin.com/forensics/shellbags/

http://www.nessus.org/u?db25594f

Plugin Details

Severity: Info

ID: 92416

File Name: microsoft_windows_bagmru.nasl

Version: 1.5

Type: local

Agent: windows

Family: Windows

Published: 2016/07/19

Modified: 2018/05/23

Dependencies: 13855, 10401, 92440

Risk Information

Risk Factor: Info

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated