Open
Description
Importing logs from the currently running system is great, but the ability to import logs from an offline disk is critical to a forensic investigation. This issue consists of two parts: Importing from a mounted drive, and importing from an offline NTFS disk, using the MFT to locate the log files.
Metadata
Metadata
Assignees
Labels
No labels