Videos

Published on February 8th, 2013 📆 | 8456 Views ⚑

0

Ubuntu 12.04 Forensics – MFT Data Attribute 0x80

https://www.ispeech.org


File Downloads at http://lecturesnippets.com/downloads/
This video is part of a series on Computer Forensics using Ubuntu 12.04. In this Lecture Snippet I continue examining the Master File Table (MFT) record of a file and discuss both Resident and Nonresident file Data Attributes. For Nonresident files I also briefly discuss the Logical Cluster Number (LCN) and the Virtual Cluster Number (VCN) which indicate the location of the data runs.


2013-02-08 00:54:48

source

Tagged with: attribute • forensics • ubuntu