v2.1.0 - stable

What's New

New AI Features Category

• Windows Copilot AI Assistant
• Windows Recall AI

Windows 11 Modern Features

• Snap Layouts & Snap Groups
• Focus Assist
• Widgets Dashboard
• Windows Subsystem for Android (WSA)
• Taskbar Customizations

Authentication & Security

• LSA Protection
• WDigest Credential Caching
• Remote Access Tracing

---

Technical Improvements

• Frontend Security Hardening
• Mobile & Responsive Design
• Build System Enhancements

---

Statistics

Artifact Coverage

• Total Artifacts: 148
• Categories: 14
• Registry Paths: 500+ unique locations

By Category

Category	Count	Highlights
System Modifications	22	Boot config, Windows Update, features
User Behaviour	17	Jump lists, cloud sync, gaming
Persistence Methods	15	Run keys, scheduled tasks, WMI
Security Monitoring	15	Defender, firewall, audit logs
Program Execution	13	AmCache, Prefetch, UserAssist
File Operations	12	Recent docs, shellbags, thumbnails
Network Infrastructure	12	WiFi, DNS, proxy, VPN
Browser Activity	8	Chrome, Firefox, IE, security zones
Communication Apps	8	Teams, Discord, Slack, Zoom
Virtualization	7	Docker, Hyper-V, VMware, WSL
Authentication	6	SAM, LSA, credential providers
Remote Access	6	RDP, TeamViewer, VPN
External Storage	5	USB device history
AI Features	2	Copilot, Recall AI

v2.0.0 - Stable release

This release includes YAML formatting fixes across all major artifact categories:

• System Modifications (12+ artifacts fixed)

  • Windows Update configuration
  • File type associations
  • Hardware device enumeration
  • Installed programs tracking
  • Windows activation artifacts
  • Windows features and version info

• File Operations (8+ artifacts fixed)

  • Print history tracking
  • Recent documents
  • 7-Zip usage artifacts
  • Shellbags and folder access
  • File History backup settings

• Network Infrastructure (6+ artifacts fixed)

  • VPN client configurations
  • WiFi profile settings
  • Network connection artifacts

• Persistence Methods (5+ artifacts fixed)

  • AppCertDLLs injection points
  • COM object registrations
  • Service and startup locations

• External Storage (3+ artifacts fixed)

  • USB device history
  • WPDBUSENUM portable device connections

• Communication Apps (4+ artifacts fixed)

  • Discord application settings
  • Email client configurations
  • Microsoft Teams artifacts
  • Slack application data

RegSeek v1.0.0 - Stable Registry Forensics Reference

Initial build