jumplist

$ target-query <path/to/target> -f jumplist

Details

Module	dissect.target.plugins.os.windows.jumplist.JumpListPlugin
Output	records

Module documentation

Jump List is a Windows feature introduced in Windows 7.

It stores information about recently accessed applications and files.

References:

• https://forensics.wiki/jump_lists

• https://github.com/libyal/dtformats/blob/main/documentation/Jump%20lists%20format.asciidoc

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace:

• jumplist.automatic_destination

• jumplist.custom_destination