Scans the target registry's Uninstall keys to inventory all active system applications. This reveals what anti-virus or endpoint response software is running. 4. Connected Drive Enumeration