Skip to content
LNK Parser

Posts tagged: #dfir

← Back to all posts
Forensic analysis of .lnk files: what investigators look for
A field guide to the artifacts inside Windows shortcuts — NetBIOS name, droid GUID, target FILETIMEs, volume serials — and how DFIR teams use them.
lnklnk forensicsdfirwindows artifacts