Update NTFS Log Tracker Modules

[vxsh4d0w]

Description

Please include a summary of the change and (if applicable) which issue is fixed.

Checklist:

Please replace every instance of [ ] with [X] OR click on the checkboxes after you submit your PR

• I have generated a unique GUID for my Target(s)/Module(s)
• I have placed the Target(s)/Module(s) in an appropriate subfolder in Targets or Modules. If one doesn't exist, I have either added it to the Misc folder or created a relevant subfolder with justification
• I have set or updated the version of my Target(s)/Module(s)
• I have verified that KAPE parses the Target(s)/Module(s) successfully via kape.exe, using --tlist/--mlist and corrected any errors
• I have validated my Target(s)/Module(s) against test data and verified they are working as intended
• I have made an attempt to document the artifacts within the Target(s) or Module(s) I am submitting. If documentation doesn't exist, I have placed N/A underneath the Documentation header
• For Targets, I have consulted either the Target Guide, Target Template, Compound Target Guide, or Compound Target Template to ensure my Target(s) follow the same format
• For Modules, I have consulted either the Module Guide, Module Template, Compound Module Guide, or Compound Module Template to ensure my Module(s) follow the same format

If your submission involves an SQLite database, have you considered making an SQLECmd Map for the SQLite database? If you make a Map, please add the SQLite database to the SQLiteDatabases.tkape Compound Target.

Thank you for your submission and for contributing to the DFIR community!

[vxsh4d0w]

Fixed typo error related NTFS Log Tracker source

[AndrewRathbun]

@vxsh4d0w this Google Drive URL, is this an official link? Or is this self-hosted? Just curious if it's an official link or if there's documentation pointing to that particular URL.

[AndrewRathbun]

Also, if it's self-hosted, maybe we'd want to include the old URL in the Documentation below should the link ever expire. GitHub links are a lot more dependable as I don't think GitHub is going anywhere anytime soon, so I just want to avoid possible issues in the future with people being suspicious of a Drive link or the link becoming invalid eventually.

[vxsh4d0w]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

[AndrewRathbun]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

Okay, thank you. I am unfamiliar with this tool's documentation, etc, so I just wanted to double-check before merging. Cheers!

[vxsh4d0w]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

Okay, thank you. I am unfamiliar with this tool's documentation, etc, so I just wanted to double-check before merging. Cheers!

You're right. I checked on GitHub and I didn't find any repo except something that was empty. Maybe I could create a repo in my account and coy next versions of this tool.

[AndrewRathbun]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

Okay, thank you. I am unfamiliar with this tool's documentation, etc, so I just wanted to double-check before merging. Cheers!

You're right. I checked on GitHub and I didn't find any repo except something that was empty. Maybe I could create a repo in my account and coy next versions of this tool.

As long as you have permission from the developer, I don't see an issue with that. Ideally, it would be nice if the tool is on GitHub but I don't expect either you or I to have much influence over that 😆

[vxsh4d0w]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

Okay, thank you. I am unfamiliar with this tool's documentation, etc, so I just wanted to double-check before merging. Cheers!

You're right. I checked on GitHub and I didn't find any repo except something that was empty. Maybe I could create a repo in my account and coy next versions of this tool.

As long as you have permission from the developer, I don't see an issue with that. Ideally, it would be nice if the tool is on GitHub but I don't expect either you or I to have much influence over that 😆

So true :D

[AndrewRathbun]

@AndrewRathbun yep, it's the download link provided within official website: https://sites.google.com/site/forensicnote/ntfs-log-tracker

Okay, thank you. I am unfamiliar with this tool's documentation, etc, so I just wanted to double-check before merging. Cheers!

You're right. I checked on GitHub and I didn't find any repo except something that was empty. Maybe I could create a repo in my account and coy next versions of this tool.

As long as you have permission from the developer, I don't see an issue with that. Ideally, it would be nice if the tool is on GitHub but I don't expect either you or I to have much influence over that 😆

So true :D

I will say, the answer is "no" if you don't ask, but absolutely no obligation to reach out to the developer.

Thanks for the PR!