USN Journal

Turkish equivalent: USN günlüğüDomain: Digital Forensics

An NTFS change journal that records metadata about filesystem modifications and can support forensic reconstruction of file activity.

  • Master File Table
  • Forensic Timeline
  • File System
  • Chain of Custody