11:45 Anatomy of an NTFS FILE Record - Windows File System Forensics 13Cubed 22.7K views - 3 years ago
39:13 Getting Started with Plaso and Log2Timeline - Forensic Timeline Creation 13Cubed 36.9K views - 5 years ago