DFSP # 389 - $Usnrl

Digital Forensic Survival Podcast - A podcast by Digital Forensic Survival Podcast - Tuesdays

Categories:

The USN Journal, also known as the Update Sequence Number Journal, is a feature of the Windows operating system that serves as a record of changes made to files and directories on a disk volume. It provides valuable information and insights into file system activities, which can aid investigators in reconstructing events, understanding system behavior, and uncovering evidence. This week I break down the artifact from a DFIR point of view provide triage strategy.....

Visit the podcast's native language site