Windowsadvanced1 min read

Shellbags

N/A

Shellbags痕迹

Shellbags · N/A · Shellbags痕迹 · SHEL-bagz · Windows shellbags · folder view artifacts · Windows · forensics · windows · registryWindowsWindows shellbags folder view artifacts

/SHEL-bagz/

Also known as: Windows shellbags, folder view artifacts

Last updated August 9, 2026

Definition

Shellbags are Windows registry artifacts that remember Explorer folder view settings — and thereby evidence that folders were accessed, including removable drives.

Real-World Example

Shellbags showing a USB stick folder path can prove the drive was opened on that PC.

References

discuss://translation · public

Translation discussion

Anyone can read and write here. Pick a display name — no email or account. Please keep the thread constructive. Thumb up a rendering you agree with — that helps the editor see consensus; it does not publish the term by itself. You can edit or delete your own comments from this browser; another device or cleared site data cannot.

Community lists who wrote, on which term, and when.

Loading discussion…