Execution Traces and Recent Activity

Identifying precisely when and how applications were launched or specific files were accessed is often the primary goal when investigating potential cheat usage. Several key Windows artifacts are designed to store exactly this type of information.