Skip to content

Please update to the latest release 0.77.2 to address Multiple CVEs.

Docs Blog Downloads VQL Reference Config Reference

CTRL K

CTRL K

Documentation
VQL Reference
- Frequently Used
- Windows
- Linux
- Server
- Parsers
- Encode/Decode
- Event Plugins
- Experimental
- Developer
- Other
- Accessors
Artifact Exchange
Artifact Reference
Knowledge Base
Training
- Playbooks
- Comparisons
  - EZ Tools
  - RawCopy
Presentations
RSS
Mailing List
Discord
YouTube
Rapid7 Docs
Search

Brought to you by Rapid7 logo

© 2026

USN

Carving $USN journal entries

16 June 2021

The Windows USN Journal

12 November 2020