You are on page 1of 6

MFT Tutorials - Analyse the header, name attribute and standard

information attribute in MFT
8 421 vues
31
7
Partager
Enregistrer
Masudur Rahman
Ajoutée le 7 déc. 2015

This tutorial should be used along with the written instruction given in class.

Catégorie
People et blogs

===============================================================
aragon guard
il y a 8 mois
Great explanation thanks. Where is the video that you mention about how to read and calculate
the header positions and bytes ?
Neri Matrixx
Neri Matrixx
il y a 1 an
I first watched this video a week into my digital forensics course and thought... wow great video.

Now that I'm months in and know all about MBR, VBR, NTFS and MFT.... I must say this video is
EXTREMELY POOR.

You are not a going teacher, and it seems like you know how to use EnCase - which is just a tool.
EnCase is NOT digital forensics. "Sector of sect" as you refer to it...is the OFFSET, that's the term
used in DF industry. You have punching in offset values without even explaining of you arrived at
the value. You should explain that structure of MFT and that attributes are in set offset locations
(I have scanned through your channel and have found no much video explaining MFT).
Masudur Rahman
Masudur Rahman
il y a 1 an
Hi Neri,

Thanks for taking the time to write this comment and I am sorry that this video could not be
helpful for you. I just thought I will reply to you about some of the points you have mentioned.

1. I have mentioned "Sector OFFSET" all over the places. I am sorry if it sounds like "sector of
sect" - which is not a term I have ever heard off.
2. In the video I did not explain who I am; therefore it is out of the question whether I am a
teacher or not. I have come across number teachers, who were great in knowledge and expertise
but not great in explaining the complicated things in a simple way. I just tried to do so - but
seems like it did not work for you.
3. I completely agree with you that I should have explained the details about attributes, attribute
structure, how I went to the beginning of the attribute and perhaps few more attributes in the
description. But see the problem is I explain this task in class with a large whiteboard, where I
can draw the diagram and explain the attribute structure very easily. In the home, I never had
that opportunity to record the diagram. Moreover, this video was made by targeting my
students, who did attend the class and then they needed to have a little help.

I had planned to buy a drawing pad to make few more updates to this and some other tutorials
as this was the exact complaint I have received from some of my students that they forgot how
to get to the "attributes". For time being, I will add a note at the beginning of the video by
mentioning this limitation.
1
Neri Matrixx
Neri Matrixx
il y a 1 an
Masudur Rahman It really does sounds like 'sector of sect', but I guess it's your accent, my bad.

MFT holds a lot of valuable info, so I don't think this video is for beginners. I spent hrs
researching MFT to know exactly what each and every HEX value represent. I would advice other
DF beginners to do the same.

I'm still subscribe to your channel, I just know now that your vidz are more for advance
examiners.
À suivre
Lecture automatique
21:56
NTFS Forensics and the Master File Table
Jonathan Adkins
17 k vues
11:24
Fixing the DISASTER - Server Room Vlog Pt. 1
Linus Tech Tips
Recommandée pour vous
11:52
UNE ERREUR À ÉVITER QUE TOUT LE MONDE COMMET
ArgEntrepreneur
Recommandée pour vous
9:50
0704 Slack Space And Swap File
Hacking & Digital Forensics & Autopsy - Stay lunix
2,1 k vues
8
Computer Forensics by Using EnCase v8
Masudur Rahman
21:31
The mind behind Linux | Linus Torvalds
TED
Recommandée pour vous
10:28
How to recover data from a hard drive (stuck heads: buzzing, clicking, etc)
DIY Perks
6 M vues
16:27
Top 20 des astuces et astuces Outlook 2016
Sele Training
Recommandée pour vous
15:11
What are certificates?
itfreetraining
335 k vues
20:32
How to create a 3D Terrain with Google Maps and height maps in Photoshop - 3D Map
Generator Terrain
Orange Box Ceo
Recommandée pour vous
7:38
7 Astuces incroyables à faire avec une perceuse
Mr.Tom
Recommandée pour vous
15:11
How to Setup Printer and Scanner Konica Minolta Bizhub C552
Muhammed shafi Kandoth
Recommandée pour vous
25:09
Learning the Linux File System
Joe Collins
583 k vues
3:43
VITAA - Un peu de rêve - En duo avec Claudio Capéo (Clip Officiel)
VITAA
Recommandée pour vous
1:38:36
Medicinal Vibes [Dub / Psydub / Psybient Music Mix]
Relentless
Recommandée pour vous
20:04
What is VMware vSphere ESXi and vCenter?
Rob Willis
Recommandée pour vous
29:03
Forensic Acquisition in Windows - FTK Imager
DFIR.Science
20 k vues
21:47
Intro to Digital Certificates
Dave Crabbe
52 k vues
7:16
Ubuntu 12.04 Forensics - MFT Searching and Header Information
Lecture Snippets
2,3 k vues
10:02
Comparing C to machine language
Ben Eater
892 k vues
10:56
Create A Custom Backup Script With Windows Robocopy by Britec
Britec09
50 k vues
10:48
Green Screen Tips, Tricks and Materials - Chromakey Tutorial
Green Screen Outlet
Recommandée pour vous
5:04
SSH - Secure Shell
Wisc-Online
9 k vues
10:53
How to Design Mockup in Photoshop | Adobe Photoshop Tutorial
Vector Slate | Graphic Design Tutorials
Recommandée pour vous
20:32
MS Project 2013 #1 ● Learn Basics in 15 Minutes ● Easy
Vision 6D
Recommandée pour vous
HTTP Request Response Headers Tutorial In Detail | HTTP Headers Tutorial
DumbTutorials
33 k vues
10:34
What is a Proxy?
F5 DevCentral
68 k vues
9:58
How I2C Communication Works and How To Use It with Arduino
How To Mechatronics
565 k vues
14:48
Introduction to Pivot Tables, Charts, and Dashboards in Excel (Part 1)
Excel Campus - Jon
Recommandée pour vous
9:57
What is RAID 0, 1, 2, 3, 4, 5, 6 and 10 (1+0)?
mobilephone2003
781 k vues
8:10
Tutorial: Digital Forensics with Winhex Part 2
ajatkinson2004
42 k vues
6:58
NSLOOKUP and MX Records
StormWind Studios
35 k vues
13:02
How to set up a virtual machine using VirtualBox
The PC Security Channel [TPSC]
402 k vues
4:49
FTK Imager Demo
giveen
27 k vues
10:30
Learn to Git: Basic Concepts
DevForge Network
152 k vues
16:42
Server Basics (1) | Setup a Domain Controller | Windows Server 2008 R2
PC-Addicts
910 k vues
12:46
ProcessMon - Power Tool for the Windows Admin
Scott Forsyth
15 k vues
4:19
3 reasons to learn PowerShell
Pluralsight
47 k vues
18:21
Debugging an application using Sysinternals Procmon and Procexp
Scott Hanselman
32 k vues
27:57
Microsoft PowerShell for Beginners - Video 1
Shane Young
411 k vues