drop mft csv · cross-validate si and fn timestamps · detect divergence indicating timestomping · score each file · surface manipulated entries · runs locally
mft csv
drop mft csv (multi-file)
or click
si vs fn deltas · precision collapse · midnight · extension plausibility
drop mft csv (mftecmd / velociraptor / autopsy)