Nice paper on correlating the UsnJrnl, LogFile, and MFT: http://rp.delaat.net/2015-2016/p18/report.pdf