Agent Skills: analyzing-mft-for-deleted-file-recovery

Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.

UncategorizedID: plurigrid/asi/analyzing-mft-for-deleted-file-recovery

Install this agent skill to your local

pnpm dlx add-skill https://github.com/plurigrid/asi/analyzing-mft-for-deleted-file-recovery

Skill Files

Browse the full folder contents for analyzing-mft-for-deleted-file-recovery.

Download Skill

Loading file tree…

Select a file to preview its contents.