Notifications
Clear all
Topic starter
31/05/2006 11:01 pm
Does anyone know how to extract usefuld data in a forensic investigation from the $logfile hidden file in a NTFS file system?
31/05/2006 11:59 pm
Yes. Start with Brian Carrier's "File System Forensics" book.
Is there anything in particular that you're looking for?
Harlan
Topic starter
01/06/2006 4:09 pm
Mmmm… nope. Nothing in concrete. I just wanted to know what kind of information I could find inside and how to extract it. Thank you for the recommendation on the book 😉