Tag: digital forensics; anti-forensics; timestomping; ext4 file system; anomaly detection; incident response; ethical hacking

Beyond the Touch Command: Correlating Crtime–Mtime Anomalies to Detect Multi-Technique Timestomping on Ext4 File Systems in a Controlled Virtual Environment

Jennifer Alvior, Karl John Arib, Mary Third Rose Erpelua, Diongie Fundador, Patrick Ibanez DOI: 10.5281/zenodo.21988922 GAS Journal of Engineering and Technology (GASJET) Timestomping, or the deliberate alteration of file system timestamps to conceal malicious activity, is still one of the Read More …