Translate low-level Win32 API FILETIME structures into readable diagnostics.
100ns tick decoding.
Analyze raw Windows forensic data.