How the USN Journal Really Works
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Have you ever wondered how you can look at the USN Journal on a live and running system? In this episode, we'll dive in to see how it actually works and whether it matches what we’ve been taught. *** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. *** 📖 Chapters 00:00 - Intro 01:04 - Demo 🛠 Resources NTFS Journal Forensics: https://www.youtube.com/watch?v=1mwiShxREm8 Introduction to MFTECmd - NTFS MFT and Journal Forensics: https://www.youtube.com/watch?v=_qElVZJqlGY #Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics
Description from 13Cubed.