📘
DFIR
Ctrl
K
Copy
Windows
Forensics
File System
UsnJournal/$LogFile
https://www.otorio.com/resources/usnjrnl-extraction-for-efficient-investigation/
www.otorio.com
DFIR-02 : Journal Forensics | Cyb3rSn0rlax
www.unh4ck.com
File Location:
Parse Data
Considerations
Anti-Forensics
Previous
$I30
Next
MFT
Last updated
1 year ago