LastActivityView
Full activity log: program launches, file operations, and more.
When to use
Reconstruct a complete timeline of user actions.
Step 03 · Deep dive
Pro tools, on tap.
When a case needs more than the built-in scanners, Custos fetches these battle-tested utilities — each from its official source — for timeline-level investigation.
USBDeview
Every USB device ever connected, with dates and details.
When to use
When you suspect cheats were run from a flash drive.
Everything
Instant file search indexing every drive on the system.
When to use
Hunt a specific file by name using cheat keywords.
System Informer
Advanced process & system monitor (formerly Process Hacker).
When to use
Inspect live processes, DLLs and network connections.
ShellBag Analyzer
Decodes Windows ShellBag folder-access history.
When to use
See which folders were opened — even after deletion.