Introduction to MFTECmd - NTFS MFT and Journal Forensics

Introduction to MFTECmd - NTFS MFT and Journal Forensics

22:01 |

Related Videos

Shimcache Execution Is Back - What You Need to Know!

20:53

Shimcache Execution Is Back - What You Need to Know!

Introduction to Windows Forensics

1:04:33

Introduction to Windows Forensics

Linux Memory Forensics Challenge

3:27

Linux Memory Forensics Challenge

Detecting Persistence in Memory

9:06

Detecting Persistence in Memory

LNK Files and Jump Lists

27:00

LNK Files and Jump Lists

A File's Life - File Deletion and Recovery

30:26

A File's Life - File Deletion and Recovery

The Weird Windows Feature You've Never Heard Of

9:52

The Weird Windows Feature You've Never Heard Of

NTFS Journal Forensics

14:21

NTFS Journal Forensics

RDP Authentication vs. Authorization

11:54

RDP Authentication vs. Authorization

Introduction to Cyber Triage - Fast Forensics for Incident Response

19:09

Introduction to Cyber Triage - Fast Forensics for Incident Response

Prefetch Deep Dive

36:15

Prefetch Deep Dive

Detecting PsExec Usage

23:16

Detecting PsExec Usage

Anatomy of an NTFS FILE Record - Windows File System Forensics

11:45

Anatomy of an NTFS FILE Record - Windows File System Forensics

Recycle Bin Forensics

8:17

Recycle Bin Forensics

Where's the 4624? - Logon Events vs. Account Logons

6:37

Where's the 4624? - Logon Events vs. Account Logons

New Course! Investigating Linux Devices

1:27

New Course! Investigating Linux Devices

Mounting Linux Disk Images in Windows

7:20

Mounting Linux Disk Images in Windows

Event Log Chainsaw Massacre - Powerful Threat Detection

18:48

Event Log Chainsaw Massacre - Powerful Threat Detection

Introduction to MFTECmd - NTFS MFT and Journal Forensics

22:02

Introduction to MFTECmd - NTFS MFT and Journal Forensics

Investigating Windows Courses

2:52

Investigating Windows Courses