What is nTimetools
XMLStarlet offers a suite of command line utilities for manipulating and querying XML documents.
nTimetools: A Suite of Timestamp Management Tools
nTimetools is a collection of console tools designed for managing timestamps in the Windows operating system. This suite includes two tools that enable both forensic analysts and red teamers to modify and verify file timestamps with an impressive precision of up to 100 nanoseconds. nTimeview is a tool that allows forensic analysts to examine the MACB timestamps of files on a live system.
It uses the undocumented NtQueryInformationFile API
It utilizes the undocumented NtQueryInformationFile API. Therefore, it functions on NTFS, FAT, and even mapped drives.
No Privileged Access Required
nTimestomp enables red teamers to modify the MACB timestamps of files with precision down to 100 nanoseconds.
Forensic Analysts Learn to Identify Evidence of Timestomping
Forensic analysts are typically trained to identify '0's in the millisecond position as indicators that timestomping has taken place.
nTimetools Reviews
No reviews yet.
