dissect.target icon indicating copy to clipboard operation
dissect.target copied to clipboard

Parse the DestList stream of AutomaticDestination (Jump Lists)

Open Zawadidone opened this issue 1 year ago • 2 comments

Improve the Windows Jump list plugin (https://github.com/fox-it/dissect.target/pull/669) by parsing the DestList stream of the AutomaticDestination file.

References

  • https://github.com/libyal/dtformats/blob/main/documentation/Jump%20lists%20format.asciidoc#2-automatic-destinations-files
  • https://github.com/log2timeline/plaso/blob/c6d4ff877303645a64058407d56977274176972c/plaso/parsers/olecf_plugins/automatic_destinations.yaml
  • https://binaryforay.blogspot.com/2016/02/jump-lists-in-depth-understand-format.html

Zawadidone avatar Apr 05 '24 22:04 Zawadidone

Hi @Zawadidone , were you planing to work on this?

EinatFox avatar Oct 03 '24 15:10 EinatFox

No

Zawadidone avatar Oct 04 '24 14:10 Zawadidone