explainx.ainewsletter3.4k
tag

usn-journal▌

2 indexed skills · max 10 per page

skills (2)

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills · analyzing-slack-space-and-file-system-artifacts

0

Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills · analyzing-mft-for-deleted-file-recovery

0

Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.