:py:mod:`dissect.shellitem.lnk` =============================== .. py:module:: dissect.shellitem.lnk Submodules ---------- .. toctree:: :titlesonly: :maxdepth: 1 c_lnk/index.rst lnk/index.rst Package Contents ---------------- Classes ~~~~~~~ .. autoapisummary:: dissect.shellitem.lnk.Lnk Attributes ~~~~~~~~~~ .. autoapisummary:: dissect.shellitem.lnk.c_lnk .. py:class:: Lnk(fh: io.BufferedReader, target_idlist: Optional[LnkTargetIdList] = None, linkinfo: Optional[LnkInfo] = None, stringdata: Optional[LnkStringData] = None, extradata: Optional[LnkExtraData] = None) This class represents a LNK file's SHELL_LINK_HEADER, and the remainder of the parsed LNK file structures. This SHELL_LINK_HEADER structure contains identification information, timestamps, and flags that specify the presence of optional structures. Parses a .lnk file (aka Microsoft Shell Item) according to the MS-SHLLINK specification reference: https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-SHLLINK/%5bMS-SHLLINK%5d.pdf :param path: (string) Path to a link file. :param target_idlist: A LnkTargetIdList object. :param linkinfo: A LnkInfo object. :param stringdata: A LnkStringData object. :param extradata: A LnkExtraData object. .. py:property:: clsid :type: uuid.UUID Returns the class id (clsid) of the LNK file. .. py:method:: flag(name: str) -> int Returns whether supplied flag is set. :param name: Name of the flag :returns: >0 if flag is set :rtype: int .. py:method:: __repr__() -> str Return repr(self). .. py:data:: c_lnk