Add Jump Lists collection (Get-JumpLists.ps1)
Collect Jump List artifacts showing recent files per application. Includes smart app detection via content scanning, LNK file enumeration with target extraction, and both automatic/custom destinations. Supports -ShowAll and -MaxPerApp parameters. Mark Jump Lists complete in TODO.md.
This commit is contained in:
2
TODO.md
2
TODO.md
@@ -18,7 +18,7 @@
|
||||
- [ ] UserAssist - Programs run by user through Windows Explorer
|
||||
- [ ] ShimCache (AppCompatCache) - Executable files that have been run
|
||||
- [ ] AmCache - Program execution with file hashes and timestamps
|
||||
- [ ] Jump Lists - Recently accessed files per application
|
||||
- [x] Jump Lists - Recently accessed files per application
|
||||
- [ ] Prefetch files - Program execution history with run counts
|
||||
- [ ] BAM/DAM - Background Activity Moderator (program execution timestamps)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user