Using Encase to review LNK files to detect files copied to USB?

Hi all,

I understand reviewing LNK files from a SSD can provide insight into which files might have been copied to an external drive/usb. Which script/processing option in Encase would help to identify these files?

What caveats should I keep in mind? Are there some guides/reading material you would recommend I reference to understand this topic better.

Thank you!

computerforensics detect drive external files guides identify insight lnk reference review script ssd understand usb