Recent Activity

Execution

This is about … .

Recently used files

Windows LNK There are several artifacts indicating user activity. One of them is LNK files. To analyse acquired LNK files use 🛠 LECmd (E.