Deleted Evidence - Fill in the Map to Luke Skywalker

Deleted Evidence - Fill in the Map to Luke Skywalker

via YouTube Direct link

NTFS Metadata Files: SMFT

5 of 12

5 of 12

NTFS Metadata Files: SMFT

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Deleted Evidence - Fill in the Map to Luke Skywalker

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Introductions
  3. 3 Causes of File Deletion
  4. 4 Recovering Deleted Attacker Files
  5. 5 NTFS Metadata Files: SMFT
  6. 6 NTFS Metadata Files: $130
  7. 7 Special Case - SDELETE
  8. 8 FileSystemFiles
  9. 9 Windows Defender - APT29 Case Study
  10. 10 Application Compatibility Cache
  11. 11 Windows Prefetch
  12. 12 Final Thoughts 2

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.