1. Collect NTFS forensic information with osquery blog | 2018-05-28 16:06 | blog.trailofbits.com | original ↗ | #incident-response | #windows | #digital-forensics