Skip to content
Windows File Time Stamp Display Flaw
bishopfox.com | advisory | #windows | #advisory | #forensics | #ntfs | #anti-forensics | #timestamps
Summary
Vincent Liu's Black Hat 2005 finding: maliciously low file timestamps via NtSetInformationFile render blank in Windows Explorer and forensic tools like EnCase and WinHex.
- Published
- Collected