[ #dfir #windowsir #metadata ]

I find metadata very interesting and the information you can gain from not only LNK metadata but also networking or just general descriptors of things. Good information on things to look out for in LNK files.