iexplore.downloads#
$ target-query <path/to/target> -f iexplore.downloads
Module |
|
Output |
|
Module documentation
Internet explorer browser plugin.
Function documentation
Return browser downloads records from Internet Explorer.
- Yields BrowserDownloadRecord with the following fields:
ts_start (datetime): Download start timestamp. ts_end (datetime): Download end timestamp. browser (string): The browser from which the records are generated from. id (string): Record ID. path (string): Download path. url (uri): Download URL. size (varint): Download file size. state (varint): Download state number. source: (path): The source file of the download record.