Making Sense of ShellBags
Windows Forensics — Evidence of File/Folder Opening
medium.com