Chapter 32. Windows Shortcut Files (Link Files)

Information in this chapter:

• The purpose of link files, how they are created, and how they work
• How link files can be of evidentiary value
• Link files as evidence
A link file is a pointer to a file in a different location, which is called the target file. Link files are used liberally by the Windows operating system, and they can be created in numerous ways. A user can create a link file intentionally, for example, by placing a shortcut on the desktop, or they can also be created by Windows, without the user’s knowledge. The overall purpose of a link file is to enhance the user’s experience as he or she navigates a computer. A link file can help you find documents you recently opened or quickly ...

Get Digital Forensics for Legal Professionals now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.