2 ms·Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations17 points by ankitg12 2mo agofuzzfactor 2mo agoThis is advanced stuff that nobody should be unaware of whether they use Windows or not.