Skip to content
Threat Feed
Subscribe

Tag

Forensics-Tampering

1 brief RSS
medium advisory

Detection of USN Journal Deletion via FSUtil

Detection of the deletion of the Windows Update Sequence Number (USN) Journal using the fsutil.exe utility to identify attempts by adversaries to hinder forensic investigations.

defense-evasion windows forensics-tampering
1r 1t