search

bodik / defender

notes on applied computer security
https://bodik.github.io/defender
12 stars 9 forks source link

forensics: elaborate on change time file attrs #13

Open bodik opened 5 years ago

bodik commented 5 years ago

C in MAC times does not stand for creation (as it corelates many times) but for 'change of attributes'

elaborate more on text just to remind myself

bodik commented 5 years ago

also elaborate on relatime mount flag