JumpList Explorer
Description: used to analyze LNK files to identify application information related to a user's profile
Installation: can be downloaded from https://www.sans.org/tools/jumplist-explorer/
Usage: File -> Load Jump Lists
JumpList files are located here:
C:\Users\% USERNAME%\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinationsC:\Users\%USERNAME%\AppData\ Roaming\Microsoft\Windows\Recent\CustomDestinations
Resources
Last updated