Time-stamp of a created file can be modified by attacker. This project is meant to track File timestamp values , using NTFS data structures rather than trusting the original time stamp modified by attacker.
LicenseAcademic Free License (AFL)
Follow Forensic - NTFS
Rate This ProjectLogin To Rate This Project
Be the first to post a review of Forensic - NTFS!