Excellent point - it is often overlooking the simplest things that weed out bad analysts and even catch some good ones. Dave Hull posted a blog entry on how to natively change timestamps within Windows Vista (and 7 I believe) not that long ago.
On Wed, Jul 1, 2009 at 5:07 AM, Ali Emirlioglu <[email protected]>wrote: > Don't forget about changing timestamps! It's a good way to catch out bad > forensic analysts and will give good ones a headache or even a ruined day if > you're lucky :P > > >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
