@cybersecdyl · Dylan | Cybersecurity & Tech
Saved 2026-05-15 · Posted 2026-01-06 · Status: New
🚨 ‼️. I can find any file that ever existed on your computer.
This piece of evidence is the USNJ and keeps a record of every file creation, change and deletion. It is a normal part of the NTFS file system for recovery. However it is a goldmine for cybersecurity analysts.
Using the journal you can get insight to anything that touched the disk, even if only for a few seconds.
Did you know about this artifact?
#cybersecurity #digitalforensics
Content ideas (0)
No ideas generated yet. Run /instagram-sync ideate from Claude Code to create some.
Comments (15)
Laughs with a magnet in hand. Have fun reading the file now😈
My computer isn't running windows.
So why couldn't they show us any dirt from Epstein island?
*laughs in Solaris*
How does a noob access this file on windows for viewing? Asking for another noob
It's very easy to wipe it
Is this something thats cleared up by writing over the whole disk multiple times?
What’s the equivalent of this for a Mac?
What about ssd?
Did you know about this file? Let me know
I never store more than half the disk capacity and frequently replace all "deleted" bits with a random sequence of 0s and 1s on my disk
I use arch btw
How I hire you?
I can view the USN journal with fsutils, but is there a way to clean it?
Where is this file?