ITM is an open framework - Submit your contributions now.

Insider Threat Matrix™Insider Threat Matrix™
  • ID: DT092
  • Created: 27th July 2024
  • Updated: 27th July 2024
  • Platform: Windows
  • Contributor: Joshua Phillips

MFT Unusual Timestamp Patterns

If multiple files have suspiciously aligned creation or modification times or identical timestamps but different entry numbers, this might indicate that the timestamps were manually set to specific values rather than being naturally generated by the system.