DFIR

Networking
- Networking
Windows
Linux
Enterprise Architecture
Mac
- Forensics
  - Page 3
Attacker Information
IR Playbook
- Activity from Unmanaged Host
- Page 4

Powered by GitBook

UsnJournal/$LogFile

File Location:

Parse Data

Considerations

Anti-Forensics

Previous$I30 NextMFT

Last updated 5 months ago

On this page

Parse Data
Considerations
Anti-Forensics

UsnJrnl Forensics Extraction for Efficient Investigation

DFIR-02 : Journal ForensicsCyb3rSn0rlax