UsnJournal/$LogFile

https://www.otorio.com/resources/usnjrnl-extraction-for-efficient-investigation/www.otorio.com

DFIR-02 : Journal Forensics | Cyb3rSn0rlaxwww.unh4ck.com

File Location:

Parse Data

Considerations

Anti-Forensics