Top Posters
Since Sunday
r
5
m
5
h
5
r
5
t
5
B
5
P
5
s
5
m
5
c
5
c
4
4
New Topic  
shaerovira shaerovira
wrote...
Posts: 488
5 years ago

Why is MAC data considered unreliable as primary forensic evidence?



▸ Every time the file is opened, the Create date changes.

▸ Users can easily modify that information.

▸ Opening the file in a different version of an operating systems restarts the Create date.

▸ Access and modify dates are not treated the same way by applications as they are by the OS.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 62 times
1 Reply
Replies
Answer verified by a subject expert
n00835996n00835996
wrote...
Posts: 345
5 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

shaerovira Author
wrote...

5 years ago
Thanks
wrote...

Yesterday
Thanks for your help!!
wrote...

2 hours ago
Thanks
New Topic      
Explore
Post your homework questions and get free online help from our incredible volunteers
  844 People Browsing
Related Images
  
 4190
  
 446
  
 261
Your Opinion
Who's your favorite biologist?
Votes: 587