How well do you really understand the times you see during an investigation? Are you confident in testifying that something happened at a specific time, or on a specific date? This presentation will revisit the file times found on Windows computers and what they mean. It will also focus on the dates and times recorded by MacOS computers, including timestamps found outside of the normal places.
Lee Whitfield (@lee_whitfield), OnDemand Subject Matter Expert - Forensics Lead,
SANS Institute
Негізгі бет Ғылым және технология MAC Times, Mac Times, and More - SANS Digital Forensics & Incident Response Summit 2017
Пікірлер: 2