Posts

Showing posts from June, 2018

Using the SIFT workstation to gain registry information

File Carving in a FAT 32 File system

AnalyzeMFT

Shellbags

MACB Timestamps and $I30in NTFS File Systems