why lnk_parser vs LECMD?

[EricZimmerman]

unless things changed i didnt think lnk_parser was finding everything thats available in a lnk file, especially around things like shell items, etc

bstrings for some of the intersecting RegEx built into the tool would also be a neat thing to add

[evild3ad]

I added the LNK module in August 2022. LECmd was my first choice., but when I remember correct, LECmd was not supporting recursive parsing of a driver letter and there was no way to write out a line of csv to stdout.

Let me know if anything has changed and I'm happy to implement LECmd.

I put bstrings on my TODO list. I think I will find the time for an update of MemProcFS-Analyzer in 1-2 weeks.

[EricZimmerman]

it does not currently write the csv to stdout but i suppose it could be made to do so. it would of course dump the contents to stdout but its not formatted