Forensic info on exFAT timestamps: first of a series of blog posts

The first in a series of posts discussing exFAT timestamps, how they are populated by different operating systems and the way different forensics tools present them to the examiner. https://t.co/wDGGeNzlQy

— Adam Harrison (@harrisonamj) July 1, 2018

1234n6: exFAT Timestamps: exFAT Primer and My Methodology https://t.co/5cM5LlHLby

— Adam Harrison (@harrisonamj) July 1, 2018