{"provider_url":"https://hatena.blog","description":"\u306f\u3058\u3081\u306b \u3053\u3093\u306b\u3061\u306f\u3001iria_piyo\ud83d\udc23\u3067\u3059\u3002 \u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u3092\u884c\u3046\u969b\u306b\u30d5\u30a1\u30a4\u30eb\u306b\u5c5e\u6027\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u3067\u7d50\u679c\u304c\u9055\u3063\u305f\u306e\u3067\u66f8\u3044\u3066\u3044\u3053\u3046\u3068\u601d\u3044\u307e\u3059\u3002 \u4f7f\u7528\u3057\u305f\u30c4\u30fc\u30eb\u306fThe Sleuth Kit\u3067\u3059\u3002 \u8a73\u7d30\u306f\u3053\u3061\u3089 https://www.sleuthkit.org/sleuthkit/ \u74b0\u5883 Windows10 \u30d0\u30fc\u30b8\u30e7\u30f31803 \u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u5f8c\u306b\u5c5e\u6027\u3092\u4ed8\u4e0e\u305b\u305a\u306b\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u3092\u884c\u3063\u305f\u5834\u5408 \u30d5\u30a1\u30a4\u30ebchick.txt\u3092fsutil\u30b3\u30de\u30f3\u30c9\u3067\u4f5c\u6210\u3057\u3001istat\u30b3\u30de\u30f3\u30c9\u3067\u30bf\u30a4\u30e0\u30b9\u30bf\u30f3\u30d7\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002 chick.txt\u4f5c\u6210\u6642 >istat \\\\.\\C: 223402-128-1 MFT E\u2026","type":"rich","url":"https://iria-piyo.hatenablog.com/entry/2018/12/07/194859","published":"2018-12-07 19:48:59","author_name":"iria_piyo","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Firia-piyo.hatenablog.com%2Fentry%2F2018%2F12%2F07%2F194859\" title=\"\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u3057\u305f\u3089MFT Modified\u3082\u66f4\u65b0\u3055\u308c\u305f\u4ef6 - \u3072\u3088\u3053\u30e1\u30e2\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_url":"https://iria-piyo.hatenablog.com/","version":"1.0","title":"\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u3057\u305f\u3089MFT Modified\u3082\u66f4\u65b0\u3055\u308c\u305f\u4ef6","width":"100%","provider_name":"Hatena Blog","height":"190","blog_title":"\u3072\u3088\u3053\u30e1\u30e2","image_url":null,"categories":["Forensics","Windows","Windows_Timestamp"],"author_url":"https://blog.hatena.ne.jp/iria_piyo/"}