Releases: forensicmatt/RustyLnk
Releases · forensicmatt/RustyLnk
RustyLnk v0.1.1
- Made --source a required argument
- Made mft reference numbers nested structs
RustyLnk v0.1.0
First release!
RusyLnk 0.1.0
Matthew Seyer <https://github.com/forensicmatt/RustyLnk>
LNK Parser written in Rust.
USAGE:
RustyLnk.exe [FLAGS] [OPTIONS]
FLAGS:
-b, --bool_expr JMES Query as bool only. (Prints whole record if true.)
-h, --help Prints help information
-V, --version Prints version information
OPTIONS:
-q, --query <QUERY> JMES Query
-s, --source <PATH> The LNK file or folder with LNK files to parse.