---
title: "Discussion on \"Windows Forensics Overview\" | Hashnode"
description: "Discussion on \"Windows Forensics Overview\". In this section, we will provide a concise overview of the key Windows artifacts and forensic procedures.\nNTFS\nNTFS (New Technology File System) is a proprietary file system developed by Microsoft as a part of its Windows NT operating system family. ..."
url: "https://hashnode.com/posts/windows-forensics-overview/691a0349e5efc62198ca9768"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Windows Forensics Overview](https://khoafrancisco.hashnode.dev/windows-forensics-overview?utm_source=hashnode&utm_medium=feed)

In this section, we will provide a concise overview of the key Windows artifacts and forensic procedures. NTFS NTFS (New Technology File System) is a proprietary file system developed by Microsoft as a part of its Windows NT operating system family. ...

Nov 16, 2025 · 11 min read · khoafrancisco.hashnode.dev  
Read the article

## Written by

[Khoa Nguyen](https://hashnode.com/@khoafrancisco)

@khoafrancisco · VietNam

  
[View profile](https://hashnode.com/@khoafrancisco)

Mình quan tâm đến lĩnh vực an toàn thông tin

Mình thích tìm hiểu công nghệ đặc biệt về lĩnh vực an toàn thông tin. Mình có ghi chú các bài này chủ yếu luyện tiếng Anh và đọc thêm. Cảm ơn mọi người đã quan tâm và đón đọc. Nếu có góp ý gì xin hãy liên lạc với mình nhé!

## Responses

Markdown supported · ⌘↵ to post

No responses yet.