JumpLister

KO | EN

gitlite — search

#javascript #hacktoberfest #go #rust #linux #docker #nodejs #windows #kubernetes #awesome-list #pytorch #security #ios #openai

(★ 18)

No description available.

JumpLister Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

JumpLister
==========

## Info ##

Jump Lists have been widely discussed within the forensic community, in particular on the win4n6 mailing list. Jump lists from a forensic perspective have been described as follows (Troy Larson): “put a MS-CFB (compound file binary file format) parser in front of the link file parser, you will have a tool that opens Windows 7 Jump lists” So that means they are a MS-CFB with N… MS-SHLLINK, so that’s what this application does.

JumpLister is designed to open one or more Jump List files, parse the Compound File structure, then parse the link file streams that are contained within. It uses the LNK parser I wrote so stuff like object ID’s and MAC addresses are handled. The latest version also parses out the [DestList](http://articles.forensicfocus.com/2012/10/30/forensic-analysis-of-windows-7-jump-lists/) data and performs a lookup on the [AppId](http://www.forensicswiki.org/wiki/List_of_Jump_List_IDs).

This functionality would not be possible without the hard work of the forensics community and the public release of the information on the forensics wiki.

## Third party libraries ##

- [CsvHelper](https://github.com/JoshClose/CsvHelper): CSV output
- [Shellify](http://sourceforge.net/projects/shellify/) : LNK file parsing
- [OpenMCDF](http://sourceforge.net/projects/openmcdf/): Microsoft Compound Document File Format parsing library for OLE structured storage
- [Utility](http://www.woanware.co.uk): Helper functions (woanware)

## Requirements ##

- Microsoft .NET Framework v4.5

JumpLister

JumpLister Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

JumpLister

JumpLister Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README