Ubuntu 12.04 Forensics - MFT Searching and Header Information

File Downloads at http://lecturesnippets.com/downloads/ This video is part of a series on Computer Forensics using Ubuntu 12.04. In this Lecture Snippet I use hexedit to search for the Master File Table (MFT) record of a file I have saved on the Desktop of a Windows computer. I convert the file name to hexadecimal values and search the hex string. After finding the file I examine the header information of the file.