Submission + - Forensics Meets Its Match: New Tools Thwart Police (cio.com)
rabblerouzer writes: Antiforensic tools have slid down the technical food chain, from Unix to Windows, from something only elite users could master to something nontechnical users can operate. "Five years ago, you could count on one hand the number of people who could do a lot of these things," says one investigator. "Now it's hobby level." Take, for example, TimeStomp. Forensic investigators poring over compromised systems where Timestomp was used often find files that were created 10 years from now, accessed two years ago and never modified.
