fox-it/acquire

Additional NTFS Artefact Collection

Opened this issue · 0 comments

The following files would be beneficial when collecting data with Acquire.

{code:java}
C:$LogFile
C:$Extend$UsnJrnl:$Max
C:$Extend$RmMetadata$TxfLog$Tops:$T
C:$Extend$RmMetadata$TxfLog$T{code}