Journal Forensics 101
March 6, 2013 Steven Wolk
|
Note: The code accompanying this article is available for download here. A good friend of mine, who also happens to be president of our local user’s group, had been encouraging me to present a session at one of their meetings. I resisted for some time, but finally decided this was an exciting prospect. The topic I would choose became clear to me almost immediately. We use journaling in my shop for so many purposes that we simply couldn’t survive without it. I’ve always been very interested in journaling, especially in applications of the technology to forensics and recovery. It’s |
