![]() LNK files are excellent artifacts for forensic investigators who are trying to find files that may no longer exist on the system they’re examining. Why are LNK Files Important to Your Digital Forensics Investigation? ![]() ![]() Windows-created LNK files are generated when a user opens a local or remote file or document, giving investigators valuable information on a suspect’s activity. LNK files can be created by the user, or automatically by the Windows operating system. They are shortcut files that link to an application or file commonly found on a user’s desktop, or throughout a system and end with an. LNK files are a relatively simple but valuable artifact for the forensics investigator. This is the third blog post in a series of five about recovering Business Applications & OS Artifacts for your digital forensics investigations.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |