home/categories/astronomy-physics/njones17-ai-agent-master-cyber-skills-list-skills-forensics-analyzing-slack-space-and-file-system-artifacts-skill-md
astronomy-physicsresearch

analyzing-slack-space-and-file-system-artifacts

Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.

Njones17
maintainer
Njones17
Updated 3/6/2026
Stars
6
Forks
2
quick start

Installation and usage

Examine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden data and reconstruct file activity on NTFS volumes.

Installation
$ install --globalskills.sh
Usage

Once installed, you can use this skill by running the following command in your terminal:

skills use analyzing-slack-space-and-file-system-artifacts