hunting-for-defense-evasion-via-timestomping
0
Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT. Uses analyzeMFT and Python to identify files with anomalous temporal patterns indicating anti-forensic timestomping activity.
Install this skill
Run this command in your terminal. No account required — it auto-detects your AI tool and installs the skill file.
npx @skills-hub-ai/cli install cybersecurity-skills-hunting-for-defense-evasion-via-timestompingOr download directly:
View all CLI commands →Setup by platform
Instructions
Security
Loading security scan...