timeline-reconstruction skills

7 tagged timeline-reconstruction, measured the same way as everything else here.

Browse within: evidence-collection 7forensics 7lnk-files 7shortcut-analysis 7windows-artifacts 7

Youngmaidainon/Agent-Level-Up

Skill Claude CodeCodex

Parse Windows LNK shortcut files to extract target paths, MAC timestamps, volume serial numbers, and machine identifiers for forensic timeline reconstruction. Use when investigating recently-accessed files, tracking removable media or network paths referenced by shortcuts, or building a DFIR timeline from LNK…

not rated 3 9d ago A 67 tokens MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: