.. generated, remove this comment to keep this file ``mru.run`` =========== .. code-block:: console $ target-query -f mru.run .. list-table:: Details :widths: 20 80 * - Module - ``dissect.target.plugins.os.windows.regf.mru.MRUPlugin`` * - Output - ``records`` **Module documentation** Return MRU data stored at various registry keys. The Windows registry contains various keys about Most Recently Used (MRU) files. References: - https://winreg-kb.readthedocs.io/en/latest/sources/explorer-keys/Most-recently-used.html **Function documentation** Return the RunMRU data. The ``HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU`` registry key contains information about the most recent commands that have been performed by the Run application References: - https://digitalf0rensics.wordpress.com/2014/01/17/windows-registry-and-forensics-part2/