Results for “mftecmd”
6 skillsMore results
Hunting For Defense Evasion Via Timestomping
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT using analyzeMFT and Python.
24.6k · bundle
Qmd
Indexes local files and searches them with BM25, vector, and hybrid queries, plus MCP mode.
1 · bundle
Flowstudio Power Automate Monitoring
Monitor Power Automate flow health, failure rates, and tenant assets through the FlowStudio MCP cached store with governance metadata and remediation hints.
36.2k
Snowflake MCP
Installs the Snowflake Connector for Python and builds a wheel package using PEP-517.
28
Performing Windows Artifact Analysis With Eric Zimmerman Too
Parse and analyze Windows forensic artifacts including MFT, registry hives, prefetch files, event logs, LNK files, and jump lists using Eric Zimmerman's EZ Tools suite and KAPE.
24.6k · bundle