Skip to content
USBForensics

Posts tagged: #shellbags

← Back to all posts
Which Files Were Opened From a USB Stick? LNK, Jump Lists
Tie shortcuts, Jump Lists, ShellBags and 4663 events to a physical USB device with volume serial numbers, drive letters and time, and name the user.
usb-forensicslnkjump-listsshellbags