Notifications
Clear all

LNK file artifacts

2 Posts
2 Users
0 Reactions
515 Views
(@mike_lee)
New Member
Joined: 9 years ago
Posts: 2
Topic starter  

Hi guys,

while analyzing LNK file artifacts on one case I noticed that some LNK files from "Recent" folder are missing target MAC timestamps. What could be the reason for that?

Target OS is Win7.

Best regards,
Michal


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

If you create a timeline, you might be able to get some valuable context as to what was going on on the system when the files were created, and as such, possibly provide a clue as to this condition.


   
ReplyQuote
Share: