DFIR120 – Userassist 2019-01-21 (2022-05-15) Mat The UserAssist keys carry some value as they indicate the execution of GUI software.