Another detailed report on Shellbag analysis “Windows ShellBags Forensics in Depth”: https://www.sans.org/reading-room/whitepapers/forensics/windows-shellbags-forensics-in-depth-34545