usnjrnl¶

Category: OS / Windows

Source: Cargo

File Extensions: .bin

Tags: filesystem, forensics, ntfs, windows

The usnjrnl tool is a command-line utility for parsing Windows UsnJrnl files. It allows you to extract and analyze information from the USN Journal, which is a feature of the NTFS file system that tracks changes to files and directories. This tool can be useful for forensic investigations and understanding file system activity.