AuthorAndrew Case

Total time: 12 minutes

Shortcut files, which have a .lnk extension, allow users to leave markers in convenient places for access to files and folders deep within the filesystem hierarchy. Common shortcuts include Desktop icons to applications, icons to external drives, and icons to mapped network shares. In this module we explore the metadata stored within LNK files and show their immense forensics value. In the lab students process LNK files on their own and answer questions seen in common investigative scenarios.

More Modules In This Lesson
New Modules

Want to be the first to know about new modules?

Notify Me