Results for “mftecmd”

3 skills

Performing Windows Artifact Analysis With Eric Zimmerman Too

Parse and analyze Windows forensic artifacts including MFT, registry hives, prefetch files, event logs, LNK files, and jump lists using Eric Zimmerman's EZ Tools suite and KAPE.

24.6k · bundle

More results

Hunting For Defense Evasion Via Timestomping

Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT using analyzeMFT and Python.

24.6k · bundle

Flowstudio Power Automate Monitoring

Monitor Power Automate flow health, failure rates, and tenant assets through the FlowStudio MCP cached store with governance metadata and remediation hints.