Live data from Hacker News

Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations

andreafortuna.org

Post reply on HN

Print view View original

1–2 of 2 posts

Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations

#1

Post by ankitg12 » Thu, Jul 30, 2026, 12:49 PM UTC

Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations
andreafortuna.org

Re: Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations

#2

Post by fuzzfactor » Thu, Jul 30, 2026, 1:26 PM UTC

This is advanced stuff that nobody should be unaware of whether they use Windows or not.

Post reply on HN