Shortcuts with extension .Ink are created and accessed by users. They provide information about:

• A. Running application
• B. Files or network shares
• C. Application logs
• D. System logs

Answer: (B)

Shortcuts serve as pointers to a resource rather than containing the resource itself. A file with the .Ink extension stores the target path it points to, which is usually a file or a folder, and often includes a network location as a UNC path. Because of this, these shortcuts reveal what resource a user intended to access—whether it’s a local file or a location on a network share. In investigations, examining these shortcuts helps you reconstruct user activity by showing exactly which files or network shares were involved and when the shortcut was created or last used. While a shortcut can be set to launch an application, the actionable information you extract from it is the destination resource, not the fact that an application could run.