explainx.ainewsletter3.4k
tag

hunting-for-defense-evasion-via-timestomping▌

1 indexed skills · max 10 per page

skills (1)

hunting-for-defense-evasion-via-timestomping

mukul975/Anthropic-Cybersecurity-Skills · hunting-for-defense-evasion-via-timestomping

0

Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT. Uses analyzeMFT and Python to identify files with anomalous temporal patterns indicating anti-forensic timestomping activity.