Windows Timelines in Minutes

Windows Timelines in Minutes

via YouTube Direct link

Intro

1 of 30

1 of 30

Intro

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Windows Timelines in Minutes

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Windows Timelines in Minutes
  3. 3 What is this talk about?
  4. 4 Why should you care?
  5. 5 5 minute NTFS tutorial (cont.)
  6. 6 Part of the MFT entry for a root directory
  7. 7 More about NTFS Timestamps
  8. 8 Extract timestamp info
  9. 9 MACR retrieveal script overview
  10. 10 Create a database
  11. 11 Build that database
  12. 12 Create the table
  13. 13 Load the table from CSV file
  14. 14 Create & Populate timeline table
  15. 15 Run all the querries you want
  16. 16 Script to print a timeline
  17. 17 Example run of print-timeline.sh
  18. 18 Optional: Import into LibreOffice Calc
  19. 19 Viewing in Calc
  20. 20 Script to print timeline for each file
  21. 21 Example run of print-file-timeline.sh
  22. 22 Understanding Timestamps
  23. 23 Copying a File
  24. 24 Access a File
  25. 25 Modify a File (save contents)
  26. 26 Delete a File
  27. 27 Rename a File
  28. 28 Move a File (same volume)
  29. 29 Move a File (new volume)
  30. 30 Summary

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.