{"id":3464,"date":"2022-02-18T02:07:59","date_gmt":"2022-02-18T10:07:59","guid":{"rendered":"https:\/\/wonghoi.humgar.com\/blog\/?p=3464"},"modified":"2022-02-18T02:08:00","modified_gmt":"2022-02-18T10:08:00","slug":"windows-logs-every-single-filename-you-visited-shellbag-out-of-the-box","status":"publish","type":"post","link":"https:\/\/wonghoi.humgar.com\/blog\/2022\/02\/18\/windows-logs-every-single-filename-you-visited-shellbag-out-of-the-box\/","title":{"rendered":"Windows logs every single filename you visited (ShellBag) out of the box!"},"content":{"rendered":"\n

Basically Windows is making a diary of every single folder\/filenames you’ve visited in chronological order. Just learned about something called ShellBag while using NTlite to slipstream Windows. WTF!<\/p>\n\n\n\n

Parents can run a scan with ShellBag Analyzer<\/a> in their family computer and see what their teenager has been up to! <\/p>\n\n\n\n

Everybody should first disable this feature by running this registry settings (or manually creating the DWORD entry and set it to 1) which you can download and execute below:<\/p>\n\n\n\n

Windows Registry Editor Version 5.00\n\n[HKEY_CURRENT_USER\\Software\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\Shell]\n\"BagMRU Size\"=dword:00000001<\/pre>\n\n\n\n
Disable-ShellBags<\/a>Download<\/a><\/div>\n
<\/div>
<\/path><\/svg><\/i> \"Loading\"<\/p>
<\/div>","protected":false},"excerpt":{"rendered":"
Basically Windows is making a diary of every single folder\/filenames you’ve visited in chronological order. Just learned about something called ShellBag while using NTlite to slipstream Windows. WTF! Parents can run a scan with ShellBag Analyzer in their family computer … Continue reading →<\/span><\/a><\/p>\n
<\/div>\n
<\/path><\/svg><\/i> \"Loading\"<\/p>\n
<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-3464","post","type-post","status-publish","format-standard","hentry","category-windows"],"_links":{"self":[{"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/posts\/3464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/comments?post=3464"}],"version-history":[{"count":1,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/posts\/3464\/revisions"}],"predecessor-version":[{"id":3466,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/posts\/3464\/revisions\/3466"}],"wp:attachment":[{"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/media?parent=3464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/categories?post=3464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wonghoi.humgar.com\/blog\/wp-json\/wp\/v2\/tags?post=3464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}