DFSP # 015 - $UsnJrnl File
Digital Forensic Survival Podcast31 Mai 2016

DFSP # 015 - $UsnJrnl File

The $UsnJrnl is an artifact that logs certain changes to files in NTFS volumes. It is a great source of timeline information for malware\ IR investigations, time stomping concerns and anti-forensics activities (i.e. wiping) as well as an additional source of file use and knowledge evidence for disk forensics.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(498)

Populært innen Vitenskap

fastlegen
tingenes-tilstand
romkapsel
jss
liberal-halvtime
rekommandert
forskningno
rss-paradigmepodden
sinnsyn
fjellsportpodden
tomprat-med-gunnar-tjomlid
rss-nysgjerrige-norge
smart-forklart
villmarksliv
rss-kunstig-intelligens-med-elisabeth-maren-og-morten
rss-inn-til-kjernen-med-sunniva-rose
rss-overskuddsliv
rss-fuglehundfolk
tidlose-historier
vett-og-vitenskap-med-gaute-einevoll