Title
Timestamp Patterns in Windows Forensics
Abstract
Timestamps are among the most expressive artefacts in a digital forensic investigation. Our research shows that the distinct patterns caused by the interaction with individual files can yield more insight than previously documented and enables application fingerprinting within a Windows environment through timestamps alone. Furthermore, we classify timestamp forgery tools and present a means to detect their use.
Year
Venue
DocType
2022
ERCIM NEWS
Journal
Issue
ISSN
Citations 
129
0926-4981
0
PageRank 
References 
Authors
0.34
0
2
Name
Order
Citations
PageRank
Robert Luh100.68
Michael Galhuber200.34