Add typed URLs extraction with multi-profile support
Add Get-TypedURLs.ps1 for browser typed URL forensics: - IE (registry), Edge, Chrome, Chromium (all profiles), Firefox - Auto-detects all browser profiles (Default, Profile 1, 2, etc.) - Shows typed counts and visit frequencies - Proper DB locking/cleanup with finally blocks - Requires sqlite3.exe for Chromium-based browsers Update README.md and TODO.md with recent scripts.
This commit is contained in:
19
README.md
19
README.md
@@ -28,6 +28,15 @@ Scripts located in `windows/` directory. Run as Administrator for full access.
|
||||
- **Get-RecentDocs.ps1** - Recently opened documents from OpenSavePidlMRU
|
||||
- Supports `-ShowAll` or `-MaxPerType N` parameters
|
||||
- Parses PIDL binary data to extract file paths
|
||||
- **Get-JumpLists.ps1** - Jump List artifacts per application
|
||||
- Shows automatic/custom destinations and recent LNK files
|
||||
- Smart app detection via content analysis
|
||||
- Supports `-ShowAll` or `-MaxPerApp N` parameters
|
||||
- **Get-TypedURLs.ps1** - Manually typed URLs from browsers
|
||||
- IE (registry), Edge, Chrome, Chromium, Firefox
|
||||
- Shows typed counts and visit frequencies
|
||||
- Supports all browser profiles automatically
|
||||
- Requires sqlite3.exe for Chromium-based browsers
|
||||
|
||||
#### System Information
|
||||
- **Get-Info.ps1** - Comprehensive system information (user, OS, network, disk, etc.)
|
||||
@@ -35,6 +44,16 @@ Scripts located in `windows/` directory. Run as Administrator for full access.
|
||||
- `-Mode simple` - Just usernames (default)
|
||||
- `-Mode detailed` - Key info with last logon times
|
||||
- `-Mode full` - Complete details including groups and SIDs
|
||||
- **winfetch.ps1** - System info display with ASCII art (fastfetch-inspired)
|
||||
- Windows 11 logo with ANSI colors
|
||||
- `-Logo small` for compact output
|
||||
|
||||
#### Developer & Security Artifacts
|
||||
- **Get-SSHArtifacts.ps1** - SSH forensic artifacts
|
||||
- Known hosts with connection counts
|
||||
- SSH config, keys, authorized_keys
|
||||
- PuTTY sessions and OpenSSH server logs
|
||||
- Supports `-ShowKeys` to display public key contents
|
||||
|
||||
### Usage Examples
|
||||
|
||||
|
||||
Reference in New Issue
Block a user