Add Jump Lists collection (Get-JumpLists.ps1)

Collect Jump List artifacts showing recent files per application.
Includes smart app detection via content scanning, LNK file
enumeration with target extraction, and both automatic/custom
destinations. Supports -ShowAll and -MaxPerApp parameters.

Mark Jump Lists complete in TODO.md.
This commit is contained in:
2026-02-03 21:57:10 +01:00
parent dcebc0f4fa
commit 0f15779472
2 changed files with 209 additions and 1 deletions

View File

@@ -18,7 +18,7 @@
- [ ] UserAssist - Programs run by user through Windows Explorer
- [ ] ShimCache (AppCompatCache) - Executable files that have been run
- [ ] AmCache - Program execution with file hashes and timestamps
- [ ] Jump Lists - Recently accessed files per application
- [x] Jump Lists - Recently accessed files per application
- [ ] Prefetch files - Program execution history with run counts
- [ ] BAM/DAM - Background Activity Moderator (program execution timestamps)