A fast and cross platform LNK Parser written in Rust that gives you the ability to query the records via JMESPath queries. Output is JSONL.
Matthew Seyer <https://github.com/forensicmatt/RustyLnk>
LNK Parser written in Rust.
RustyLnk.exe [FLAGS] [OPTIONS]
-b, --bool_expr JMES Query as bool only. (Prints whole record if true.)
-h, --help Prints help information
-V, --version Prints version information
-q, --query JMES Query
-s, --source The LNK file or folder with LNK files to parse.