Download

Skill UI

Browse and discover 6006+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search MFT , found 4 results

Default Newest Most Downloaded

Recover Deleted MFT Files

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

Analyzes NTFS $MFT records plus $UsnJrnl, $LogFile and slack space with MFTECmd/analyzeMFT to recover metadata/content of deleted files, rebuild file system timelines, and spot anti-forensic timestomping during incident response.

NTFS Artifact Recovery Toolkit

analyzing-slack-space-and-file-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Workflow for analyzing NTFS slack space, MFT entries, the USN change journal, and alternate data streams to recover hidden data and reconstruct file activity, using Sleuth Kit tools, MFTECmd, and Python parsing scripts in forensic investigations.

Timestomping Defense Hunting

hunting-for-defense-evasion-via-timestomping

mukul975/Anthropic-Cybersecurity-Skills

Detect MITRE T1070.006 timestamp manipulation by comparing NTFS $STANDARD_INFORMATION and $FILE_NAME entries in the MFT, leveraging analyzeMFT and Python to flag anomalous temporal patterns indicative of anti-forensic timestomping activity during threat hunts.

Windows Artifact Analysis Suite

performing-windows-artifact-analysis-with-eric-zimmerman-tools

mukul975/Anthropic-Cybersecurity-Skills

Automates parsing Windows artifacts with Eric Zimmerman’s EZ Tools suite, combining KAPE collection with MFTECmd, PECmd, RECmd, EvtxECmd, and Timeline Explorer output to give responders structured CSV data for registries, prefetch, event logs, and the MFT.

1

Language