tag:blogger.com,1999:blog-9518042.post9063470372314208433..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Copying FilesUnknownnoreply@blogger.comBlogger1125tag:blogger.com,1999:blog-9518042.post-89290702912313382302007-08-20T21:38:00.000-05:002007-08-20T21:38:00.000-05:00...Windows shortcuts or LNK files. To be honest, I...<I>...Windows shortcuts or LNK files. To be honest, I'm not really sure why this comes up...</I><BR/><BR/>I suppose that, if a user opened the file from the thumb, a link would be created, and it would reference the path to the thumb. As the link contains the target's date stamps, it could be meanignful from that standpoint, too, depending on how the dates correlate to the original file on the host machine.Anonymousnoreply@blogger.com