NTFS Forensics and the Master File Table

Показать описание

Jonathan Adkins

Рекомендации по теме

Комментарии

Dude you just explained my textbook better than my textbook so far. I literally read for hours and this clarified everything that I was fuzzy on.

RingsOfSolace

Thank you!! Great content, straight to the point, well explained, slow talk for better understanding, this is a 5 star video.

nwizard

Thanks for making this video, it helped me understand it clearly

krenilraj

Jonathan, thanks so much for this video. I am studying Computer Forensics going for a couple of different certs, and your video has been the best on this topic by very far. I have watched it 4-5 times now and learned a lot each time. Awesome stuff Sir!

michaelwhitlow

Great!!! I was looking for such info all day, everybody just talking and talking theory and slides, and here is useful practice, thanks a lot!!!!

pawsdev

Agree, this is the best video available on this subject. Thanks!!!

michaelgarvin

What you are referring to as MBR is actually VBR which starts at sector 63 usually. Rest all information is simply awesome. Thanks for making this video.

TheCorei

Thank-you for this video Jonathan! Awesome work.

ImRhys

Lol the funny thing is I'm watching this out of pure boredom and just to get out of my homework XD

I am a true nerd

bonkmaykr

Definitely one of the best videos I've seen. You should come teach my professor how to teach hahaha. Thank you so much for posting it, and thank you even more for using Kali as I can easily follow along.

jxkgero

Great explanation, thanks for the great video. Very useful.

johnenalstos

Hello Jonathan, I am a new follower. I hope you continue making more videos. I am a DFIR major, and appreciate your content. Thank you!

kso

Very good explanation.. a lot better than a course I took.

pagarb

20:02 The offset is from NTFS Sector ok ? not from MBR Sector 0... The value need Multiply to 4092...and add to NTFS-Sector

DorivalAfonsoCardoso

very educational, thank you for providing this video

likestomeasurestuff

Absolutely insane knowledge, great job, man!

jameslewn

Jonathan, I took some graduate classes with you. It's a small YouTube world after all...

andresmarrero

I'm an old man, taking a forensics class, trying to figure out my homework with an MFT parser. His power points are telling me nothing. I'm trying to figure out what to do. UGH

djstar

Is there a way to fix a damaged image due to an interrupted partition process? I have an entire folder with damaged images hoping there's a way to fix them and be able to see them again.

alro

Hello. Is there any book, that contains an Introduction to filesystems and types?

Mike-kqyc

NTFS Forensics and the Master File Table

NTFS Forensics and the Master File Table

Anatomy of an NTFS FILE Record - Windows File System Forensics

The Master File Table Lecture Video Part 1

NTFS and MFT

NTFS Master File Table (MFT) Explained: Extract Recover Files from Resident & Non-Resident Data

Introduction to MFTECmd - NTFS MFT and Journal Forensics

NTFS file system explained: understanding resident and non-resident files - Computer forensics

NTFS Journal Forensics

Digital Forensics(Part-6) 2024 - NTFS Master File Table And Data Runlists - Data Recovery Tutorial

Windows MACB Timestamps (NTFS Forensics)

Ubuntu 12.04 Forensics - NTFS Partition Overview

Processing the $Boot File | NTFS Tutorial | eForensics Magazine

Look at the NTFS MFT record for a file or folder, using IsoBuster

9.8 NTFS Master File Table

File Allocation Table

Digital Forensics (Part 5) - NTFS File System, Reading MBR & Boot Code - Data Recovery Tutorial

Working with Windows and CLI Systems | Computer Forensics & Investigation Course

NTFS vs FAT32 vs exFAT - Everything You Need To Know

NTFS File System

NTFS file system in computer forensics

NTFS File System Explained

Windows File System | Windows Forensics Tutorial | eForensics Magazine

9.11 NTFS MFT Attributes

Windows NTFS Index Attributes ($I30 Files)