drop mft csv · detect mass loss of sub-second timestamp precision · identify files where precision was stripped by external tools · surface populations affected by timestomping operations · runs locally
mft csv
drop mft csv
or click
NTFS stores 100ns resolution · external tools often write second-level only
drop mft csv (mftecmd / mftrcsv)