drop hundreds of lnk or csv exports · unified access timeline · deleted target detection · volume/machine grouping · csv export · runs locally
lnk inputs
drop .lnk or LECmd CSV
or click
optional mft csv — paths missing from mft flagged as deleted evidence
drop .lnk files or LECmd CSV exports