Add typed URLs extraction with multi-profile support

Add Get-TypedURLs.ps1 for browser typed URL forensics:
- IE (registry), Edge, Chrome, Chromium (all profiles), Firefox
- Auto-detects all browser profiles (Default, Profile 1, 2, etc.)
- Shows typed counts and visit frequencies
- Proper DB locking/cleanup with finally blocks
- Requires sqlite3.exe for Chromium-based browsers

Update README.md and TODO.md with recent scripts.
This commit is contained in:
2026-02-03 22:25:56 +01:00
parent d41fa4d4bd
commit aa4e6fa88f
3 changed files with 242 additions and 1 deletions

View File

@@ -28,6 +28,15 @@ Scripts located in `windows/` directory. Run as Administrator for full access.
- **Get-RecentDocs.ps1** - Recently opened documents from OpenSavePidlMRU
- Supports `-ShowAll` or `-MaxPerType N` parameters
- Parses PIDL binary data to extract file paths
- **Get-JumpLists.ps1** - Jump List artifacts per application
- Shows automatic/custom destinations and recent LNK files
- Smart app detection via content analysis
- Supports `-ShowAll` or `-MaxPerApp N` parameters
- **Get-TypedURLs.ps1** - Manually typed URLs from browsers
- IE (registry), Edge, Chrome, Chromium, Firefox
- Shows typed counts and visit frequencies
- Supports all browser profiles automatically
- Requires sqlite3.exe for Chromium-based browsers
#### System Information
- **Get-Info.ps1** - Comprehensive system information (user, OS, network, disk, etc.)
@@ -35,6 +44,16 @@ Scripts located in `windows/` directory. Run as Administrator for full access.
- `-Mode simple` - Just usernames (default)
- `-Mode detailed` - Key info with last logon times
- `-Mode full` - Complete details including groups and SIDs
- **winfetch.ps1** - System info display with ASCII art (fastfetch-inspired)
- Windows 11 logo with ANSI colors
- `-Logo small` for compact output
#### Developer & Security Artifacts
- **Get-SSHArtifacts.ps1** - SSH forensic artifacts
- Known hosts with connection counts
- SSH config, keys, authorized_keys
- PuTTY sessions and OpenSSH server logs
- Supports `-ShowKeys` to display public key contents
### Usage Examples