detect-timestomping

Here is 1 public repository matching this topic...

Ahmed-kamal1 / TimeStomp-Detection

TimeStomp-Detection A forensic analysis tool for detecting timestamp tampering in Windows systems. Automates metadata extraction and cross-referencing from NTFS MFT, ShimCache, Amcache, and $I30 entries. Outputs consolidated insights to help investigators identify timestomping artifacts efficiently.

detection forensics cybersecurity timestomp detect-timestomping

Updated Nov 27, 2024
Python

Add this topic to your repo

To associate your repository with the detect-timestomping topic, visit your repo's landing page and select "manage topics."

Learn more