Hunting for Defense Evasion via Timestomping
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION
5,463,370 AI resources indexedWorking toward the world’s largest AI resource index.
Reusable instructions for compatible AI agents.
Field counts come from the latest full-catalog snapshot. A resource can belong to several fields and platforms.
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION
Examine file system slack space, MFT entries, USN journal, and alternate
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT. Uses analyzeMFT and Python to identify files with anomalous temporal patterns indicating anti-forensic timestomping activity.
Analyze the NTFS Master File Table ($MFT) to recover metadata and content
Agent skill for Data Analyst, ML / AI Engineer, published by plurigrid. Project details and file access are provided by the publisher.
Agent skill for Data Analyst, ML / AI Engineer, Security Engineer, published by seikaikyo. Project details and file access are provided by the publisher.
Agent skill for Data Analyst, ML / AI Engineer, published by KunanonJ. Project details and file access are provided by the publisher.
Agent skill for Data Analyst, Technical Writer, published by seikaikyo. Project details and file access are provided by the publisher.
Agent skill for Data Analyst, Technical Writer, published by KunanonJ. Project details and file access are provided by the publisher.
Try a broader search or clear some filters.
Platform labels describe intended use. Read each resource's author credits, requirements and available access methods.