rapid7/metasploit-framework — pull request #95 by averagesecurityguy (2012-01-06 22:52:12+00:00)
Title: Added enum_artifacts post module for Windows

The enum_artifacts module reads the /data/post/artifacts file or another similarly formatted file and checks the host to see if any of the artifacts in the file are present on the host. Artifacts include registry keys and files. This could be used to look for viruses on a machine or to check for the installation of particular software.