EC-Council CHFI (312-49) Certification Exam

What does 'timestomping' refer to in anti-forensics?

Destroying physical storage media with a hammer Encrypting file contents to conceal data from investigators Modifying file metadata timestamps to mislead timeline analysis Hiding files in unallocated disk space

Correct Answer:

Modifying file metadata timestamps to mislead timeline analysis

Access more questions from this quiz

Continue to EC-Council CHFI (312-49) Certification Exam for more practice questions and the full quiz experience.

Access More Questions