TypedPaths

What Is?

TypedPaths is a Windows Registry key that records the last 25 paths typed or inserted into the path bar of File Explorer (previously known as Windows Explorer). The typed paths, however, do not appear instantly within the TypedPaths key. The user has to close the File Explorer window for the typed paths to be committed to the registry key.

Typed Paths Blogforensafe.com

File Location:

Parse Data

Considerations

• Records the last 25 paths typed or inserted into the path bar of File Explorer

• The user has to close the File Explorer window for the typed paths to be committed to the registry.

• Last write time indicates last time search was performed and explorer was closed. Not when the search was performed.

• Does NOT save searches from start menu.

Does NOT save searches from start menu.

Anti-Forensics