Home Videos Windows NTFS Index Attributes ($I30 Files)

Windows NTFS Index Attributes ($I30 Files)

0
0
1,263

This new video by Richard Davis from “Introduction to Windows Forensics” series covers the basic information you need to know about such important artifact? as Windows NTFS Index Attributes. You’ll walk through extraction of a $I30 file from a Windows 10 virtual machine, and analyze the contents of the index looking for evidence of deleted or overwritten files:

Load More Related Articles
  • RDP Event Log Forensics

    As a continuation of the “Introduction to Windows Forensics” series, this epis…
  • Windows Process Genealogy

    As an incident responder, one of the things you need to be able to quickly do when looking…
  • Event Log Forensics with Log Parser

    As a continuation of the “Introduction to Windows Forensics” series, this vide…
Load More In Videos

Leave a Reply

Your email address will not be published. Required fields are marked *