ExFAT forensic images for timestamp testing
收藏Mendeley Data2026-04-18 收录
下载链接：
https://data.mendeley.com/datasets/krjsmdc65h
下载链接
链接失效反馈官方服务：
资源简介：
These forensic images are created in Linux Ubuntu 20.04 (using the exFAT.fuse or the exFAT native driver), MacOS Monterey , and Windows 10. The images for experiment A we utilised 4 different timezones and creating 100 files in a directory for each. In experiment B we mounted and unmounted the images from experiment A on another OS or driver. In experiment C we opened files using a default text editor. In experiment D we overwrite files by appending content using bash or batch. In experiement E we overwrite files using the default text editor (Linux: Gedit, MacOS: TextEdit, Windows: Notepad).
The first OS mentioned in the filename is from the base image, then we used the next OS (or driver) to performed the action.
创建时间：
2023-03-13
