USN Journal
N/A
USN日志
USN Journal · N/A · USN日志 · yoo-ess-en JUR-nul · NTFS change journal · $UsnJrnl · Windows · forensics · ntfs · artifactsWindowsNTFS change journal $UsnJrnl/yoo-ess-en JUR-nul/
Also known as: NTFS change journal, $UsnJrnl
Last updated August 9, 2026
Definition
The USN Journal records changes to files on NTFS volumes — creates, deletes, renames — valuable for high-resolution timelines.
Real-World Example
USN records can show a ransomware wave renaming thousands of files in seconds.
References
Related terms
discuss://translation · public
Translation discussion
Anyone can read and write here. Pick a display name — no email or account. Please keep the thread constructive. Thumb up a rendering you agree with — that helps the editor see consensus; it does not publish the term by itself. You can edit or delete your own comments from this browser; another device or cleared site data cannot.
Community lists who wrote, on which term, and when.
Loading discussion…