Nov. 21, 2023, 4:04 a.m. | /u/j_lemz

For [Blue|Purple] Teams in Cyber Defence www.reddit.com

I've been slowly pulling together a series of blogs showing when MACB timestamps change based on different operating systems and file systems. This is my most recent post where I looked at NTFS timestamp changes on mac0S using Mountly.

https://blog.joshlemon.com.au/file-timestamps-for-ntfs-on-macos-using-mountly-9e5cbaa15414

blogs blueteamsec change file macos ntfs operating systems series systems timestamps

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Security Compliance Strategist

@ Grab | Petaling Jaya, Malaysia

Cloud Security Architect, Lead

@ Booz Allen Hamilton | USA, VA, McLean (1500 Tysons McLean Dr)