sevenzip#

$ target-query <path/to/target> -f sevenzip
Details#

Module

os.windows.regf.7zip.SevenZipPlugin

Output

records

Module documentation

No documentation

Function documentation

Return 7-Zip history information from the registry.

7-Zip is an open source file archiver. If the HKCUSoftware7-Zip registry key exists, it checks for additional registry keys, such as ArcHistory and FolderHistory. This might provide insight in which files have been archived by 7-Zip.

References: