PlayforensicWindows scanner

Scanner

Send a one-time link for a Windows scan and review the results in your Playforensic workspace.

Scan workflow

Staff create the link. The player decides whether to run the Windows scan.

  1. Send an invite

    Create a single-use link in your workspace and send it to the player.

  2. The player runs the scan

    The Windows scanner shows the terms and starts after the player accepts them.

  3. Review the report

    Open the report in your workspace and inspect the files and rules behind each finding.

Evidence examples

These entries use fictional files and records to show what staff can check in a report.

File rule match Example

Rule
example_loader
File
C:\Example\sample-loader.dll

Compare the rule name and file path with the rest of the report.

FiveM module inventory Example

Module
C:\Example\FiveM\example-module.dll
Instance check
In instance

Use the recorded path and instance check to see where the module was found.

Windows execution trace Example

Program
ExampleTool.exe
Source
Windows Prefetch

Check the source of the recorded trace alongside the other evidence.