DFSP # 015 - $UsnJrnl File
Digital Forensic Survival Podcast31 Mai 2016

DFSP # 015 - $UsnJrnl File

The $UsnJrnl is an artifact that logs certain changes to files in NTFS volumes. It is a great source of timeline information for malware\ IR investigations, time stomping concerns and anti-forensics activities (i.e. wiping) as well as an additional source of file use and knowledge evidence for disk forensics.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(498)

Populært innen Vitenskap

fastlegen
romkapsel
tingenes-tilstand
jss
liberal-halvtime
forskningno
rekommandert
sinnsyn
tomprat-med-gunnar-tjomlid
villmarksliv
rss-paradigmepodden
fjellsportpodden
rss-nysgjerrige-norge
nordnorsk-historie
grunnstoffene
rss-rekommandert
tidlose-historier
rss-inn-til-kjernen-med-sunniva-rose
psykopoden
smart-forklart