Start here · Tutorial

From install to verdict.

Custos reads the records Windows quietly keeps every time a program runs — records that survive even after the program is deleted. Here's the whole workflow, from download to decision.

Before you start

Windows only

Custos reads Windows-specific artifacts; it won't run on macOS or Linux.

Run as Administrator

Several of the deepest system records are access-protected — without admin rights those scanners come back incomplete and the picture has gaps.

Get consent

Only scan a machine when the player has agreed, or when your server rules clearly require forensic review.

Install Custos

01
Open the releases page on GitHub.
02
Download the latest installer.
03
Right-click the installer → “Run as administrator.”
04
Launch Custos and pick a game — Unturned is supported today; Counter-Strike 2 is coming soon.

Open Releases →

A quick tour of the app

A slim icon-only sidebar runs down the left edge — hover any icon to see its name.

ScreenDashboardWhat it doesHome screen — app version, system support, live changelog.

ScreenScanWhat it doesThe main event: runs all forensic scanners with live progress.

ScreenLive ScanWhat it doesAdvanced — inspects the running game's memory in real time.

ScreenResultsWhat it doesReview and export findings; a badge shows the total count.

ScreenManualWhat it doesOne-click shortcuts to Windows folders, registry keys and references.

ScreenUtilitiesWhat it doesLinks to trusted third-party forensic tools.

ScreenSettingsWhat it doesAppearance and app preferences.

Your first scan

The core workflow — it takes under a minute.

01
Open the Scan page (the magnifying-glass icon).
02
Click the big Start Scan button in the center.
03
Watch the progress: a circular indicator shows overall completion, and every scanner is listed as pending, active or done — a count badge means it found something.
04
When the status reads Scan Complete, head to Results.

▸

Need to stop early? Cancel Scan stops cleanly — scanners run in smart batches with a built-in time limit, so one slow scanner can't freeze the run.

Reading your results

The summary card is green when nothing was found — red with a count when findings deserve a look. Below it, each scanner gets a collapsible card with its individual findings and how long it took.

Exporting your report

ButtonExport ResultsFilecustos-scan-YYYY-MM-DD.txtUseA quick, human-readable summary for a ticket or chat.

ButtonExport JSONFilecustos-scan-YYYY-MM-DD.jsonUseStructured data — scanner, findings, durations, errors — for records or processing.

Responsible use

Findings are leads, not proof — never ban on a single keyword match.
Get consent: scan only where the player agreed or your server rules authorise review.
Respect the law and your jurisdiction — informed consent comes first.
Custos needs Administrator rights and is intended solely for legitimate server moderation.

Settings

SettingAppearanceDetailA showcase of the accent colours the interface uses

SettingLanguageDetailEnglish and Russian

▸ Earlier versions had a “Danger Zone” that could delete the app after a scan. It's gone — Custos no longer deletes itself or any of your files.

Ready to verify?

Grab Custos, run it as administrator, and treat every finding as a lead worth checking — never a verdict.

Get Custos on GitHub →