Free Republic
Browse · Search
Bloggers & Personal
Topics · Post Article


1 posted on 04/29/2015 8:15:40 PM PDT by grumpygresh
[ Post Reply | Private Reply | View Replies ]


Navigation: use the links below to view more comments.
first previous 1-2021-25 last
To: grumpygresh

I don’t know about online data, but with general applications, i.e., Word, Excel, etc., you used to be able to set the computer’s calendar and/or clock to an earlier time, create/modify the document, save it, and that’s what would show up in Summary or Properties. That was years ago; not sure if it’s still possible.


44 posted on 04/30/2015 3:37:52 AM PDT by MayflowerMadam
[ Post Reply | Private Reply | To 1 | View Replies ]

To: grumpygresh

The programs that initially create and tag the files with the created/modified data use the system clock. It would be easy enough to reset the system clock to a previous/later date and copy the data from the original document to a document created with a modified system clock. Possibly tedious. I haven’t had reason to search out if there are any apps that would allow one to modify that data w/o going through a process like that though. If you just copy a document on the hard drive, it show the original data. I haven’t played to see if copying it to an external drive might provide new data and also remove/modify the version history.


45 posted on 04/30/2015 4:39:41 AM PDT by trebb (Where in the the hell has my country gone?)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: grumpygresh

it can be changed to show any modification timestamp even with a simple “touch” command. That being said, there are ways to reveal the modifications (that would also show some intent depending on which side of this you argue). Forensics evaluation could reveal the modifications. Another (and even simpler way) is if you can get copies of backup media and especially detailed logs from the backup software. The logs will show the previous timestamps of the files that would show something different than what they provide. The backup media will also show a timestamp of the file before it was changed. The timestamp of the file on backup media cannot be very easily modified (depending on the backup method and software used).


46 posted on 04/30/2015 4:48:00 AM PDT by FunkyZero (... I've got a Grand Piano to prop up my mortal remains)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: grumpygresh

Timestamps on a computer can be modified using the command line “touch” command.


47 posted on 04/30/2015 5:01:19 AM PDT by Flick Lives ("I can't believe it's not Fascism!")
[ Post Reply | Private Reply | To 1 | View Replies ]

To: grumpygresh

Answer is yes. BUT if it got on the net very hard to wipe it all. If it was on a local network then a competent IT guy could do it. Like others said several locations for dates, time etc. If there are images involved you need an expert to trace them.


52 posted on 04/30/2015 4:57:49 PM PDT by mad_as_he$$
[ Post Reply | Private Reply | To 1 | View Replies ]


Navigation: use the links below to view more comments.
first previous 1-2021-25 last

Free Republic
Browse · Search
Bloggers & Personal
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson