-
Notifications
You must be signed in to change notification settings - Fork 32
Expand file tree
/
Copy pathliblnk.ini
More file actions
66 lines (56 loc) · 2.33 KB
/
Copy pathliblnk.ini
File metadata and controls
66 lines (56 loc) · 2.33 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
[project]
name: "liblnk"
status: "alpha"
year_of_creation: "2009"
data_format: "Windows Shortcut File (LNK)"
documentation_url: "https://github.com/libyal/liblnk/tree/main/documentation"
features: ["debug_output", "nuget", "ossfuzz", "python_bindings", "tools"]
[dtFabric]
data_types: {
"file_header": {
"__options__": ["file_io_handle"],
"header_size": {"usage": "in_function"},
"class_identifier": {"usage": "in_struct"},
"data_flags": {"debug_format": "hexadecimal", "usage": "in_struct"},
"file_attribute_flags": {"debug_format": "hexadecimal", "usage": "in_struct"},
"creation_time": {"usage": "in_struct"},
"access_time": {"usage": "in_struct"},
"modification_time": {"usage": "in_struct"},
"file_size": {"usage": "in_struct"},
"icon_index": {"debug_format": "hexadecimal", "usage": "in_struct"},
"show_window": {"debug_format": "hexadecimal", "usage": "in_struct"},
"hot_key": {"debug_format": "hexadecimal", "usage": "in_struct"},
"unknown1": {"debug_format": "hexadecimal", "description": "Unknown (reserved)"},
"unknown2": {"debug_format": "hexadecimal", "description": "Unknown (reserved)"},
"unknown3": {"debug_format": "hexadecimal", "description": "Unknown (reserved)"}
}}
[library]
features: ["pthread", "wide_character_type"]
public_types: ["data_block", "file"]
tests: ["data_block", "data_string", "distributed_link_tracker_properties", "error", "file_header", "io_handle", "known_folder_location", "link_target_identifier", "location_information", "notify", "special_folder_location"]
tests_with_input: ["file", "support"]
[python_module]
tests_with_input: ["file", "support"]
[tools]
description: "Several tools for reading Windows Shortcut Files (LNK)"
features: ["info_tool"]
names: ["lnkinfo"]
tests: ["info_handle", "output", "path_string", "signal"]
[info_tool]
features: ["codepage"]
source_description: "a Windows Shortcut File (LNK)"
source_type: "file"
[troubleshooting]
example: "lnkinfo calc.lnk"
[development]
main_object: "file"
main_object_filename: "calc.lnk"
[test_data]
repository: "log2timeline/plaso"
files: ["NeroInfoTool.lnk"]
[tests]
profiles: ["liblnk", "pylnk", "lnkinfo"]
options_per_profile: ["", "", ""]
info_tool_profiles: ["lnkinfo"]
example_filename1: "calc.lnk"
example_filename2: "wordpad.lnk"