Velociraptor - Windows.NTFS.MFT.HiveNightmare : This artifact uses Windows.NTFS.MFT to find several files created as part of the POC tooling for « HiveNightmare » (CVE-2021-36934) #vuln #windows

https://docs.velociraptor.app/exchange/artifacts/pages/windows.ntfs.mft.hivenightmare/