dissect.target
dissect.target copied to clipboard
Parse the DestList stream of AutomaticDestination (Jump Lists)
Improve the Windows Jump list plugin (https://github.com/fox-it/dissect.target/pull/669) by parsing the DestList stream of the AutomaticDestination file.
References
- https://github.com/libyal/dtformats/blob/main/documentation/Jump%20lists%20format.asciidoc#2-automatic-destinations-files
- https://github.com/log2timeline/plaso/blob/c6d4ff877303645a64058407d56977274176972c/plaso/parsers/olecf_plugins/automatic_destinations.yaml
- https://binaryforay.blogspot.com/2016/02/jump-lists-in-depth-understand-format.html
Hi @Zawadidone , were you planing to work on this?
No