iexplore.downloads¶
$ target-query <path/to/target> -f iexplore.downloads
Module |
|
Output |
|
Module documentation
Internet explorer browser plugin.
Function documentation
Return browser downloads records from Internet Explorer.
Yields BrowserDownloadRecord with the following fields:
ts_start (datetime): Download start timestamp.
ts_end (datetime): Download end timestamp.
browser (string): The browser from which the records are generated from.
id (string): Record ID.
path (string): Download path.
url (uri): Download URL.
size (varint): Download file size.
state (varint): Download state number.
source: (path): The source file of the download record.