[prev in list] [next in list] [prev in thread] [next in thread] 

List:       forensics
Subject:    Offline NTFS Journal Parser
From:       m0rchand () comcast ! net (Tom Marchand)
Date:       2006-04-27 18:15:37
Message-ID: 042720061815.6731.44510A48000F265300001A4B22068246930B020E080C9DCF03 () comcast ! net
[Download RAW message or body]

Has anybody seen a tool that will allow examine of an offline copy of a NTFS Journal Log($LogFile).
[prev in list] [next in list] [prev in thread] [next in thread]