# Windows Sensitive Files
# Format: path|description
# Lines starting with # are comments

# === System Files ===
C:\Windows\win.ini|Windows configuration
C:\Windows\System.ini|System configuration
C:\Windows\explorer.exe|Windows Explorer
C:\Windows\winhelp.exe|Help executable
C:\Windows\winhlp32.exe|Help executable
C:\Windows\WindowsUpdate.log|Windows Update log
C:\Windows\debug\NetSetup.log|Network setup log
C:\Windows\iis.log|IIS log
C:\Windows\WindowsShell.Manifest|Shell manifest

# === Registry Hives ===
C:\Windows\System32\config\SAM|User accounts database
C:\Windows\System32\config\SYSTEM|System configuration
C:\Windows\System32\config\SECURITY|Security settings
C:\Windows\System32\config\SOFTWARE|Software settings
C:\Windows\System32\config\DEFAULT|Default user settings

# === Hosts and Network ===
C:\Windows\System32\drivers\etc\hosts|Host mappings
C:\Windows\System32\drivers\etc\networks|Network names
C:\Windows\System32\drivers\etc\services|Service ports
C:\Windows\System32\drivers\etc\protocol|Protocol numbers
C:\Windows\System32\drivers\etc\lmhosts|LAN Manager hosts

# === User Accounts ===
C:\Users\Administrator\|Administrator home
C:\Users\Administrator\Desktop\|Admin desktop
C:\Users\Administrator\Documents\|Admin documents
C:\Users\Administrator\Downloads\|Admin downloads
C:\Users\Administrator\AppData\Roaming\|Roaming app data
C:\Users\Administrator\AppData\Local\|Local app data
C:\Users\Administrator\ntuser.dat|User registry hive
C:\Users\Administrator\NTUSER.DAT|User registry hive

# === SSH Keys ===
C:\Users\Administrator\.ssh\id_rsa|SSH private key
C:\Users\Administrator\.ssh\authorized_keys|Authorized keys
C:\Users\Administrator\.ssh\known_hosts|Known hosts
C:\Users\*\.ssh\id_rsa|User SSH private key

# === Web Server (IIS) ===
C:\inetpub\wwwroot\|IIS web root
C:\inetpub\wwwroot\web.config|IIS configuration
C:\inetpub\logs\LogFiles\|IIS logs
C:\inetpub\temp\|IIS temp files
C:\inetpub\history\|IIS config history

# === Web Server (XAMPP/WAMP) ===
C:\xampp\apache\conf\httpd.conf|Apache config
C:\xampp\apache\conf\extra\httpd-xampp.conf|XAMPP config
C:\xampp\apache\logs\|Apache logs
C:\xampp\htdocs\|XAMPP web root
C:\xampp\htdocs\config.php|Web config
C:\xampp\mysql\data\|MySQL data
C:\xampp\phpmyadmin\config.inc.php|phpMyAdmin config
C:\wamp\www\|WAMP web root
C:\wamp\bin\apache\Apache*\conf\httpd.conf|WAMP Apache config

# === Application Configs ===
C:\app\.env|Application environment
C:\app\web.config|ASP.NET config
C:\app\config.php|PHP config
C:\app\app_data\|App data directory
C:\inetpub\wwwroot\.env|Environment file
C:\inetpub\wwwroot\wp-config.php|WordPress config

# === Database ===
C:\Program Files\MySQL\MySQL Server*\my.ini|MySQL config
C:\ProgramData\MySQL\MySQL Server*\Data\|MySQL data
C:\Program Files\Microsoft SQL Server\|SQL Server
C:\Program Files\Microsoft SQL Server\MSSQL*\MSSQL\Data\|MSSQL data

# === Logs ===
C:\Windows\Logs\|Windows logs
C:\Windows\Logs\CBS\|CBS logs
C:\Windows\Logs\DISM\|DISM logs
C:\Windows\System32\winevt\Logs\|Event logs
C:\Windows\System32\LogFiles\|System log files
C:\Windows\Temp\|Temp files

# === Scheduled Tasks ===
C:\Windows\Tasks\|Scheduled tasks
C:\Windows\System32\Tasks\|Task definitions

# === Service Configs ===
C:\Windows\ServiceProfiles\|Service profiles
C:\Windows\System32\config\systemprofile\|System profile

# === Boot Configuration ===
C:\boot.ini|Boot configuration (XP/2003)
C:\Boot\BCD|Boot Configuration Data
C:\Boot\boot.sdi|Boot SDI
C:\EFI\Microsoft\Boot\BCD|UEFI boot config

# === PowerShell ===
C:\Windows\System32\WindowsPowerShell\v1.0\|PowerShell
C:\Users\*\Documents\WindowsPowerShell\|PowerShell profiles
C:\Users\*\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1|PS profile

# === Certificates ===
C:\ProgramData\Microsoft\Crypto\|Crypto data
C:\Users\*\AppData\Roaming\Microsoft\Crypto\|User crypto
C:\Users\*\AppData\Roaming\Microsoft\SystemCertificates\|User certificates

# === Remote Desktop ===
C:\Users\*\Documents\Default.rdp|RDP config
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.rdp|RDP shortcut

# === VPN ===
C:\ProgramData\Microsoft\Network\Connections\|Network connections
C:\Users\*\AppData\Roaming\Microsoft\Network\Connections\|User connections

# === Recycle Bin ===
C:\$Recycle.Bin\|Recycle bin
C:\Recycler\|Recycler (XP)

# === System Volume Information ===
C:\System Volume Information\|System restore points

# === Backup Files ===
C:\Backup\|Backup directory
C:\backups\|Backups
C:\www\backup\|Web backup
*.bak|Backup files
*.old|Old files
*.backup|Backup files
