Windows Shell Item parser for shellbags' data.
-
Updated
Dec 5, 2020 - Python
Windows Shell Item parser for shellbags' data.
Windows Shell Item / ITEMIDLIST (PIDL) parser — decode .lnk LinkTargetIDList and registry ShellBags into typed items + a reconstructed path. A reusable forensic primitive. Pure Rust.
To associate your repository with the shell-item topic, visit your repo's landing page and select "manage topics."