Anatomy of an NTFS FILE Record - Windows File System Forensics
In this episode, we'll talk about the structure and composition of an NTFS FILE record. Then, we'll take a look at a sample record for a resident file and learn how to manually extract the important attributes.
** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. **
📖 Chapters
00:00 - Intro
02:08 - Analysis
🛠 Resources
Anatomy of an NTFS File Record (Cheat Sheet):
https://13cubed.s3.amazonaws.com/down...
Everything I know about NTFS (primary reference for this episode):
https://kcall.co.uk/ntfs/
010 Editor:
https://www.sweetscape.com/010editor/
#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics
Watch video Anatomy of an NTFS FILE Record - Windows File System Forensics online without registration, duration hours minute second in high quality. This video was added by user 13Cubed 13 June 2022, don't forget to share it with your friends and acquaintances, it has been viewed on our site 12,64 once and liked it 38 people.