lnk
Parse Windows shortcut and Jump List entries to extract target paths, volume serials, machine IDs, and timestamps for forensic analysis.
Instructions
Parse a Windows shortcut (.lnk / Jump List entry): target path, volume serial, machine id, target times.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | ||
| part | No | ||
| image | No | ||
| local_path | No |