ended7월 30일· 1 sources
Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations
Why it matters
Going beneath NTFS: USN Journal, dfir_ntfs, and artefact-driven investigations A skilled attacker who has spent any time studying forensics will know to modify file timestamps. Some will go further an...
1
Sources
+0
24h
—
Growth
52d
Active