usnjrnl

Here is 1 public repository matching this topic...

SecurityRonin / usnjrnl-forensic

The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomping detection, USN carving, and more.

incident-response forensics dfir threat-hunting ntfs mft usnjrnl

Updated Jul 28, 2026
Rust

Improve this page

Add a description, image, and links to the usnjrnl topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the usnjrnl topic, visit your repo's landing page and select "manage topics."

Learn more