diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx index 86d7db8..baf81ca 100644 Binary files a/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx differ diff --git a/README.md b/README.md index 84232e3..997827a 100644 --- a/README.md +++ b/README.md @@ -111,7 +111,7 @@ The [case study](https://github.com/frankwxu/digital-forensics-lab/tree/main/NIS | Lab 5 | [File Change History and USN Journal](NIST_Data_Leakage_Case/NIST_Data_Leakage_05_USNJournaling.pptx) | 2M | | Lab 6 | [Network Evidence and shellbag](NIST_Data_Leakage_Case/NIST_Data_Leakage_06_Network_Shellbag_Jumplist.pptx) | 2M | | Lab 7 | [Network Drive and Cloud](NIST_Data_Leakage_Case/NIST_Data_Leakage_07_NetworkDrive_Cloud.pptx) | 5M | -| Lab 8 | [Master File Table ($MFT) and Log File ($logFile) Analysis](NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_%24MFT.pptx) | 4M | +| Lab 8 | [Master File Table ($MFT) and Log File ($logFile) Analysis](NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_%24MFT.pptx) | 13M | | Lab 9 | [Windows Search History](NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_%24MFT.pptx) | 4M | | Lab 10 | [Windows Volume Shadow Copy Analysis](NIST_Data_Leakage_Case/NIST_Data_Leakage_10_Vol_Shadow_Copy.pptx) | 6M | | Lab 11 | [Recycle Bin and Anti-Forensics](NIST_Data_Leakage_Case/NIST_Data_Leakage_11_RecycleBin_AntiForensics.pptx) | 3M |