{"id":319,"date":"2024-02-20T02:21:07","date_gmt":"2024-02-20T02:21:07","guid":{"rendered":"https:\/\/anti-forensics.com\/blog\/?p=319"},"modified":"2024-02-23T20:32:07","modified_gmt":"2024-02-23T20:32:07","slug":"disabling-userassist-in-registry","status":"publish","type":"post","link":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/","title":{"rendered":"Disabling UserAssist in Registry"},"content":{"rendered":"\n

UserAssist <\/strong>registry forensics is a method used to investigate the activity of users on a Windows operating system. It focuses on analyzing the UserAssist key in the Windows Registry, which contains information about the programs that a user has run on their computer.<\/p>\n\n\n\n

Think of it as a kind of digital footprint left behind by users. Every time someone runs an application or program on a Windows system, an entry is created in the UserAssist key. These entries include details such as the name of the program, how many times it was run, and when it was last accessed.<\/p>\n\n\n\n

Forensic analysts can use this information to reconstruct a timeline of user activity, identify frequently used applications, and gain insights into the behavior of individuals on a particular system. It’s a valuable tool for investigating incidents, such as unauthorized access or suspicious behavior, and can provide crucial evidence in digital forensic investigations.<\/p>\n\n\n\n

The linked anti-forensics application utilizes access to the Windows registry to enable or disable the UserAssist application logging.<\/p>\n\n\n\n

Download Source Code<\/h2>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

user_deassist.py Github Download<\/strong><\/a><\/p>\n\n\n\n

This program will allow you to enable or disable UserAssist tracking on Windows 10+. The –delete option will let you delete current UserAssist registry keys.<\/p>\n\n\n\n

The target OS will need to be rebooted. I haven’t tested other methods.<\/p>\n\n\n\n

Usage:\npython .\\user_deassist.py --delete  \r\npython .\\user_deassist.py --enable\npython .\\user_deassist.py --disable\n\npython .\\user_deassist.py --enum\nThe enum switch will determine what the registry values (that enable\/disable UserAssist) are currently set to.<\/code><\/pre>\n\n\n\n
Creating a Windows Executable<\/h2>\n\n\n\n
    \n
  1. Install PyCharm<\/strong>: If you haven’t already, download and install PyCharm from the JetBrains website.<\/li>\n\n\n\n
  2. Install PyInstaller<\/strong>: Open PyCharm and create or open your Python project. Then, navigate to File<\/code> > Settings<\/code> > Project: Your_Project_Name<\/code> > Python Interpreter<\/code>. Here, you can see the list of installed packages. Click on the “+” button to install a new package, search for “PyInstaller”, and click “Install Package” to install it.<\/li>\n\n\n\n
  3. Open your Python script<\/strong>: In PyCharm, open the Python script that you want to convert into an executable.<\/li>\n\n\n\n
  4. Open Terminal<\/strong>: You can open the terminal in PyCharm by going to View<\/code> > Tool Windows<\/code> > Terminal<\/code>.<\/li>\n\n\n\n
  5. Navigate to your project directory<\/strong>: Use the cd<\/code> command in the terminal to navigate to the directory where your Python script is located. For example:<\/li>\n\n\n\n
  6. cd path\/to\/your\/project\/directory<\/code><\/li>\n\n\n\n
  7. Run PyInstaller<\/strong>: Once you’re in the correct directory, you can run PyInstaller with the following command:<\/li>\n\n\n\n
  8. pyinstaller --onefile your_script_name.py <\/code>Replace your_script_name.py<\/code> with the name of your Python script.<\/li>\n\n\n\n
  9. Wait for the process to finish<\/strong>: PyInstaller will analyze your script and its dependencies, and then create a dist<\/code> folder in your project directory containing the executable file.<\/li>\n\n\n\n
  10. Find the executable<\/strong>: Once PyInstaller has finished running, you can find your standalone executable in the dist<\/code> folder within your project directory.<\/li>\n<\/ol>\n\n\n\n
    That’s it!<\/p>\n\n\n\n
    Other Reading<\/h2>\n\n\n\n
    This analysis by imphash is useful in understanding how the UserAssist works:<\/p>\n\n\n\n
    UserAssist \u2014 with a pinch of Salt \u2014 As an \u201cEvidence of Execution\u201d<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
    UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.<\/p>\n","protected":false},"author":1,"featured_media":320,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,24],"tags":[13,48,47],"class_list":["post-319","post","type-post","status-publish","format-standard","has-post-thumbnail","category-digital-forensics","category-software-code","tag-python","tag-registry","tag-userassist"],"yoast_head":"\nDisabling UserAssist in Registry - Anti-Forensics.com<\/title>\n<meta name=\"description\" content=\"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Disabling UserAssist in Registry - Anti-Forensics.com\" \/>\n<meta property=\"og:description\" content=\"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/\" \/>\n<meta property=\"og:site_name\" content=\"Anti-Forensics.com\" \/>\n<meta property=\"article:author\" content=\"https:\/\/facebook.com\/stercutis\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-20T02:21:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-23T20:32:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Max\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Max\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/\"},\"author\":{\"name\":\"Max\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/person\\\/ac3dd160cb42b1409a2a55dea58beec2\"},\"headline\":\"Disabling UserAssist in Registry\",\"datePublished\":\"2024-02-20T02:21:07+00:00\",\"dateModified\":\"2024-02-23T20:32:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/\"},\"wordCount\":441,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/anti-forensics.com-userassist-registry-disable.jpg\",\"keywords\":[\"python\",\"registry\",\"userassist\"],\"articleSection\":[\"Digital Forensics\",\"Software\\\/Code\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/\",\"name\":\"Disabling UserAssist in Registry - Anti-Forensics.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/anti-forensics.com-userassist-registry-disable.jpg\",\"datePublished\":\"2024-02-20T02:21:07+00:00\",\"dateModified\":\"2024-02-23T20:32:07+00:00\",\"description\":\"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#primaryimage\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/anti-forensics.com-userassist-registry-disable.jpg\",\"contentUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/anti-forensics.com-userassist-registry-disable.jpg\",\"width\":1024,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/disabling-userassist-in-registry\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Disabling UserAssist in Registry\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\",\"name\":\"Anti-Forensics.com\",\"description\":\"Rendering Digital Investigations Irrelevant\",\"publisher\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\",\"name\":\"Anti-Forensics.com\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/cropped-anti-forensics.com_.jpg\",\"contentUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/cropped-anti-forensics.com_.jpg\",\"width\":512,\"height\":512,\"caption\":\"Anti-Forensics.com\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/groups\\\/14345620\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/person\\\/ac3dd160cb42b1409a2a55dea58beec2\",\"name\":\"Max\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"caption\":\"Max\"},\"description\":\"Anti-forensics involves attempts to hide data, damage the confidentiality, integrity, and availability of data in an effort to make analysis and examination of this data (evidence) difficult or impossible.\",\"sameAs\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\",\"https:\\\/\\\/facebook.com\\\/stercutis\",\"https:\\\/\\\/linkedin.com\\\/in\\\/jesse-shelley\"],\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/author\\\/realjesseshelley_hkwwlra2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Disabling UserAssist in Registry - Anti-Forensics.com","description":"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/","og_locale":"en_US","og_type":"article","og_title":"Disabling UserAssist in Registry - Anti-Forensics.com","og_description":"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.","og_url":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/","og_site_name":"Anti-Forensics.com","article_author":"https:\/\/facebook.com\/stercutis","article_published_time":"2024-02-20T02:21:07+00:00","article_modified_time":"2024-02-23T20:32:07+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg","type":"image\/jpeg"}],"author":"Max","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Max","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#article","isPartOf":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/"},"author":{"name":"Max","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/person\/ac3dd160cb42b1409a2a55dea58beec2"},"headline":"Disabling UserAssist in Registry","datePublished":"2024-02-20T02:21:07+00:00","dateModified":"2024-02-23T20:32:07+00:00","mainEntityOfPage":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/"},"wordCount":441,"commentCount":0,"publisher":{"@id":"https:\/\/anti-forensics.com\/blog\/#organization"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#primaryimage"},"thumbnailUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg","keywords":["python","registry","userassist"],"articleSection":["Digital Forensics","Software\/Code"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/","url":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/","name":"Disabling UserAssist in Registry - Anti-Forensics.com","isPartOf":{"@id":"https:\/\/anti-forensics.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#primaryimage"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#primaryimage"},"thumbnailUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg","datePublished":"2024-02-20T02:21:07+00:00","dateModified":"2024-02-23T20:32:07+00:00","description":"UserAssist registry forensics is a method used to investigate the activity of users on a Windows operating system.","breadcrumb":{"@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#primaryimage","url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg","contentUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/02\/anti-forensics.com-userassist-registry-disable.jpg","width":1024,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/anti-forensics.com\/blog\/disabling-userassist-in-registry\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/anti-forensics.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Disabling UserAssist in Registry"}]},{"@type":"WebSite","@id":"https:\/\/anti-forensics.com\/blog\/#website","url":"https:\/\/anti-forensics.com\/blog\/","name":"Anti-Forensics.com","description":"Rendering Digital Investigations Irrelevant","publisher":{"@id":"https:\/\/anti-forensics.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/anti-forensics.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/anti-forensics.com\/blog\/#organization","name":"Anti-Forensics.com","url":"https:\/\/anti-forensics.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/cropped-anti-forensics.com_.jpg","contentUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/cropped-anti-forensics.com_.jpg","width":512,"height":512,"caption":"Anti-Forensics.com"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/groups\/14345620\/"]},{"@type":"Person","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/person\/ac3dd160cb42b1409a2a55dea58beec2","name":"Max","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","caption":"Max"},"description":"Anti-forensics involves attempts to hide data, damage the confidentiality, integrity, and availability of data in an effort to make analysis and examination of this data (evidence) difficult or impossible.","sameAs":["https:\/\/anti-forensics.com\/blog","https:\/\/facebook.com\/stercutis","https:\/\/linkedin.com\/in\/jesse-shelley"],"url":"https:\/\/anti-forensics.com\/blog\/author\/realjesseshelley_hkwwlra2\/"}]}},"_links":{"self":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/comments?post=319"}],"version-history":[{"count":4,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/319\/revisions"}],"predecessor-version":[{"id":326,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/319\/revisions\/326"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/media\/320"}],"wp:attachment":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/media?parent=319"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/categories?post=319"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/tags?post=319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}