windowsnotepad.tabs

$ target-query <path/to/target> -f windowsnotepad.tabs
Details

Module

apps.texteditor.windowsnotepad.WindowsNotepadPlugin

Output

records

Module documentation

Windows notepad tab content plugin.

Function documentation

Return contents from Windows 11 Notepad tabs - and its deleted content if available.

Windows Notepad application for Windows 11 is now able to restore both saved and unsaved tabs when you re-open the application.

Resources:

Yields a WindowsNotepadSavedTabRecord or WindowsNotepadUnsavedTabRecord. with fields:

content (string): The content of the tab.
path (path): The path to the tab file.
deleted_content (string): The deleted content of the tab, if available.
hashes (digest): A digest of the tab content.
saved_path (path): The path where the tab was saved.
modification_time (datetime): The modification time of the tab.