Forensic deep dive on User Search LNK files, which can help you figure out when and how an attacker uses Windows search to locate sensitive documents. https://twitter.com/HighViscosity/status/1230206612171702272