mftparse

updated this year

Analyze an NTFS $MFT CSV for timestomping and suspicious file activity

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.