Jan. 13, 2024, 12:46 p.m. | /u/OshawkUK

Computer Forensics www.reddit.com

I have just released an Autopsy module that I made for my BSc project. It uses `$UsnJrnl` to create file history timelines and recover information about deleted files. I hope it us useful to some people.

[https://github.com/Oshawk/usn-correlation](https://github.com/Oshawk/usn-correlation)

autopsy bsc computerforensics file files forensics history hope information people project recover

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Senior Security Researcher - Linux MacOS EDR (Cortex)

@ Palo Alto Networks | Tel Aviv-Yafo, Israel

Sr. Manager, NetSec GTM Programs

@ Palo Alto Networks | Santa Clara, CA, United States

SOC Analyst I

@ Fortress Security Risk Management | Cleveland, OH, United States