Introduction to MFTECmd - NTFS MFT and Journal Forensics
39:13
Getting Started with Plaso and Log2Timeline - Forensic Timeline Creation
1:04:33
Introduction to Windows Forensics
21:56
NTFS Forensics and the Master File Table
21:51
Let's Talk About Shimcache - The Most Misunderstood Artifact
30:26
A File's Life - File Deletion and Recovery
16:03
The Master File Table Lecture Video Part 1
28:09
Windows MACB Timestamps (NTFS Forensics)
36:15