πŸ”
Windows Forensic Handbook
Ctrlk
  • πŸ‘‹Welcome
  • Artifacts by Type
    • πŸ—„οΈRegistry Artifacts
    • πŸ“‚Filesystem Artifacts
    • πŸ“…Event Log Artifacts
  • Artifacts by Activity
    • πŸƒβ€β™‚οΈExecution
    • πŸ—’οΈFile Activity
      • File Creation
      • File Deletion
        • USN Journal
        • Recycle Bin $I/$R Files
      • Last Modified
      • File Origin
      • File Size
      • File Path
      • File Hash
    • πŸ‘¨β€πŸ”§Account Activity
    • 🌎Network Activity
    • πŸ”Browser Activity
    • πŸ–₯️System Enumeration
Powered by GitBook
On this page
  1. Artifacts by Activity
  2. πŸ—’οΈFile Activity

File Deletion

USN JournalRecycle Bin $I/$R Files

Last updated 1 year ago