MigrationBot: Backfill (v3.0 review queue): added to the review queue

2026-09-22T05:42:50Z

Backfill (v3.0 review queue): added to the review queue

← Older revision		Revision as of 05:42, 22 September 2026
Line 88:		Line 88:
	[[Category:Windows Prohibited Files and Apps\|003]]		[[Category:Windows Prohibited Files and Apps\|003]]
	[[Category:Migrated from cypat.guide]]		[[Category:Migrated from cypat.guide]]
			[[Category:Pending review]]

MigrationBot: Import from cypat.guide: docs/windows/prohibited_files_and_apps/intro_prohibited_files_and_apps.md

2026-09-18T17:06:35Z

Import from cypat.guide: docs/windows/prohibited_files_and_apps/intro_prohibited_files_and_apps.md

New page

{{Submit}}

-----

Author(s): a_person

Last Updated: 07-03-2025

{| class="mw-collapsible mw-collapsed wikitable" style="width:100%"
! Recommended Prerequisites (click to expand)
|-
|

None

|}

== What is this about? ==

This is mainly about deleting and removing unwanted files and apps. Note that this article does not include malware, as it is a different subject.

== Why do we need to worry about this? ==

This is for several reasons:

* Takes up space
* Increases attack surface (especially files like plaintext password files)
* Violates company policies

== Concepts ==

* Apps are stored in multiple locations
** C:\Program Files\
*** 64 bit
** C:\Program Files(x86)\
*** 32 bit on 64 bit computer
** C:\Users[User]\AppData\Local
*** User specific apps that don't require administrative privileges to download
*** also contains user specific app data
* Prohibited files are very diverse. Examples:
** Mp3 files
** OGG files
** Plain text password files
** Games
** etc.

== Tools ==

=== [https://www.voidtools.com/ Voidtools(Everything)] - Prohibited files ===

Voidtools is very helpful when finding prohibited files. It uses regex (Regular expresion) and is much faster than the Windows Explorer search. It is also helpful as you are able to see the creation date, which can help you determine whether a file is a system file or a prohibited file. If I wanted to find mp3 files, the regex would simply be<code>*.mp3</code>.

=== Settings and Control Panel - Prohibited apps ===

Settings and Control Panel are the easiest ways to find and remove apps.

Uninstall in Settings:

# Select Start(windows icon) > Settings > Apps > Installed apps.
# Find the app you want to remove, select More > Uninstall.
# Note: Some apps can't be uninstalled from the Settings app right now. For help uninstalling these apps, follow the instructions to uninstall from Control Panel.

Uninstall from Control Panel:

# In search on the taskbar, enter Control Panel and select it from the results.
# Select Programs > Programs and Features.
# Press and hold (or right-click) on the program you want to remove and select Uninstall or Uninstall/Change. Then follow the directions on the screen.

=== [https://windirstat.net/ WinDirStat] - Prohibited files ===

WinDirStat is a disk usage statistics viewer and cleanup assistant for Windows. It can assist in finding whether Users have prohibited files in their Common directories, as the percentage indicates empty directories, and it is easy to sift through common directories. It can also be used to find prohibited files in unusual locations, such as in <code>C:\</code> or in <code>%HOMEPATH%</code>.

== Practice ==

Most images have prohibited files:<br />
https://images.cypat.guide#gid=0

A specific practice image that will help with this is the [https://sakouk.me/cyberpatriot#eths-cyber-squad-policy-violations-image ETHS Cyber Squad Policy Violations Image]

-----

=== References, Further Reading, & Tools Mentioned ===

* https://support.microsoft.com/en-us/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98
* https://www.voidtools.com/
* https://windirstat.net/

[[Category:Windows Prohibited Files and Apps|003]]
[[Category:Migrated from cypat.guide]]

Draft:Introduction to Prohibited Files and Apps - Revision history

MigrationBot: Backfill (v3.0 review queue): added to the review queue

MigrationBot: Import from cypat.guide: docs/windows/prohibited_files_and_apps/intro_prohibited_files_and_apps.md