Hacker News new | ask | show | jobs
Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations (andreafortuna.org)
17 points by ankitg12 17 hours ago
1 comments

This is advanced stuff that nobody should be unaware of whether they use Windows or not.