The anti-forensics Diaries
$MFT (Learn File Desk) – incorporates one foundation file document for each file and folder on an NTFS quantity. In the event the allocation details for the file or folder is simply too substantial to suit in just a single record, other file information are allotted also.Timestomping is the act of fixing the timestamp within the metadata of a fil