DFSP # 326 - MFT

Published: May 17, 2022, 4:44 a.m.

b'

This week I\\u2019m covering the Master file table as a core forensic artifact for Windows investigations. This artifact has value is both a primary and secondary artifact and offers opportunity to decode evidence in a number of different situations. In this episode I\\u2019m covering the forensic basics, some use cases and tools you can use to bring the value of the artifact to its full potential.

'