windows-c-drive-cleanup

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/Quarantine-OrphanMsp.ps1 uses the system utilities takeown.exe and icacls.exe to modify ownership and permissions of files within the C:\Windows\Installer directory. This capability is used to enable the removal of orphaned patch files that are otherwise protected by system permissions.
  • [COMMAND_EXECUTION]: The script scripts/Analyze-CDrive.ps1 performs recursive directory scans across the system drive and user profile directories (including AppData and ProgramData) to aggregate file size information for cleanup analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 11:43 AM