Agent skill
Hunting for Defense Evasion via Timestomping
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION
OpenClawDevelopment & Engineering
26zl96
Apache-2.0View resource
Agent skills
Reusable instructions for compatible AI agents.
Explore by field
Loading catalog totals…Field counts come from the latest full-catalog snapshot. A resource can belong to several fields and platforms.
Resources
Search resultsAgent skill
Hunting for Defense Evasion via Timestomping
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT. Uses analyzeMFT and Python to identify files with anomalous temporal patterns indicating anti-forensic timestomping activity.
OpenClawDevelopment & Engineering
luokai014
Apache-2.0View resource
Agent skill · Reference
performing-endpoint-forensics-investigation
Agent skill for Security Engineer, published by mahipal. Project details and file access are provided by the publisher.
Development & Engineering
mahipal72
Apache-2.0View resource
No matching resources
Try a broader search or clear some filters.
Platform labels describe intended use. Read each resource's author credits, requirements and available access methods.