Windows NT Log File Defined

The Microsoft Windows NT Logfile, officially designated as $Logfile, is a special system file used by Microsoft Windows NT. NT uses this file to keep track of what it is doing. If the system fails, NT uses the information stored in the Logfile to stabilize itself. The Logfile is similar to the Windows NT Page File in that user information can pass through the Logfile unbeknownst to the user. Like the NT Page file, the Logfile should be analyzed for security leaks and investigative leads. NTI covers the Windows NT Logfile in detail in the NTI's 5 Day Computer Forensics Training Course and software is provided to the participants.

A set of eight trial illustration posters is available to assist in visually explaining some of the technical terminology you may be called on to explain to a non-technical jury or judge.