Sitemap
All pages on the site.
Home
Blog
- $LogFile Parsers Compared: LogFileParser, NTFS Log Tracker
- How Far Back Does the $LogFile Go? Limits and Pitfalls
- A $LogFile Investigation Walkthrough (Fictional Case)
- $LogFile Restart Area and LSNs Explained
- $LogFile Format 1.1 vs 2.0: What Changed in Windows 8
- Recovering Deleted-File Evidence from the $LogFile
- Detecting Timestomping with the NTFS $LogFile
- NTFS $LogFile Redo/Undo Operations Explained
- How to Analyze an NTFS $LogFile, Step by Step
- How to Acquire the NTFS $LogFile (Live and Dead Box)
- $LogFile vs $UsnJrnl vs $MFT: Which NTFS Artifact When
- NTFS $LogFile Forensics: The Complete Guide