★ 2 · Updated 2026-09-28
Examines NTFS slack space, MFT entries, USN journal records, and alternate data streams to recover hidden data and reconstruct file activity.
Browse skills that produce this output.
★ 2 · Updated 2026-09-28
Examines NTFS slack space, MFT entries, USN journal records, and alternate data streams to recover hidden data and reconstruct file activity.
★ 327 · Updated 2026-06-30
Analyze NTFS MFT to recover deleted file metadata and content