Note:I translated Japanese into English using Google Translate.Thank you, Google. Use $LogFile to check overwriting of the cluster. Two images are used for the test. These two image files are almost the same size. Copy Dragonfly.jpg to for…

Note:I translated Japanese into English using Google Translate.Thank you, Google. Enable USN Journal on sample NTFS volumes and Copy Example.jpg to the Pictures folder. Check the status of ObjectID, ObjectID is not set. Using USN Analytics…

Note:I translated Japanese into English using Google Translate.Thank you, Google. Hop Step Jumplist. Display file 5f7b5f1e01b83767.automaticDestinations-ms with HEX.Only 'DestList' exists in this file. I started explorer and I looked up 4 …