Module 5 – Navigation and listing using PowerShell

Module 5 – Navigation and listing using PowerShell

In this module we are going to use the Windows built-in tool: PowerShell

PowerShell is a modern command shell that includes the best features of other popular shells.

• Command for listing (files and folders): dir
• Alternative command for listing: ls
• Command for listing all files and folders: dir -Force
• Command for navigation to Recent folder: cd .\AppData\Roaming\Microsoft\Windows\Recent
• Command for listing: dir

Let’s decode the jumplist file to determine the application: https://forensicswiki.xyz/wiki/index.php?title=List_of_Jump_List_IDs