HOW TO INVESTIGATE FILES WITH FTK IMAGER

by Mark Stam   The Master File Table or MFT can be considered one of the most important files in the NTFS file system, as it keeps records of all files in a volume, the physical location of the files on the drive and file metadata. One of the most....