Difference between pages "Talk:Timestomp" and "File:Timestomp mace change.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
(Timestomp MACE value change)
 
Line 1: Line 1:
== Delete Timestamps? ==
+
Timestomp MACE value change
 
+
The article text says something about TimeStomp being able to delete timestamps. That must surely be nonsense.
+
 
+
A timestamp (FILETIME) is just a number from 0 up to some maximum.  It can be overwritten, it can be zeroed out, but it cannot be deleted. The timestamp 0 or 1 is as valid as any other timestamp.
+
 
+
There are some utility libraries that cannot convert such timestamps to 'strings', and instead produce something like 'Illegal time', or just an empty string, but that is due to bugs in that particular software, and should not be assumed to be anything else.[[User:Athulin|Athulin]] 09:07, 14 December 2011 (PST)
+

Revision as of 12:30, 25 October 2007

Timestomp MACE value change