A computer forensic method for detecting timestamp forgery in NTFS

IFIP—international federation for information processing

Information Systems · 1991 · 283 citations

Computing, Computer Science, Information Technology +9

Error, Uncertainty, and Loss in Digital Evidence

Eoghan Casey · International journal of digital evidence · 2002 · 125 citations

Computing, Information Technology, Computer Security +16

Time and date issues in forensic computing—a case study

Chris Boyd, Pete Forster · Digital Investigation · 2004 · 86 citations

Computing, Computer Engineering, Computer Science +13

The Rules of Time on NTFS File System

K. P. Chow, Frank Law, Michael Y. K. Kwan et al. · 2007 · 52 citations

Computing, Computer Science, Information Technology +12

Unification of relative time frames for digital forensics

Malcolm W. Stevens · Digital Investigation · 2004 · 36 citations

Computing, Computer Science, Digital Forensics +9