Plugins
1 pluginResults for “volumes”
3 skillsMore results
Analyzing Slack Space And File System Artifacts
Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.
24.6k · bundle
Analyzing Mft For Deleted File Recovery
Recover metadata and content of deleted files from NTFS volumes by analyzing the Master File Table, $LogFile, $UsnJrnl, and MFT slack space using forensic tools like MFTECmd and analyzeMFT.
24.6k · bundle