Additional NTFS Artefact Collection
Opened this issue · 0 comments
DissectBot commented
The following files would be beneficial when collecting data with Acquire.
{code:java}
C:$LogFile
C:$Extend$UsnJrnl:$Max
C:$Extend$RmMetadata$TxfLog$Tops:$T
C:$Extend$RmMetadata$TxfLog$T{code}