Python can be used to modify timestamps or timestomp files:
import os
import time
new_time = 1672531200 # UNIX timestamp (Jan 1, 2023)
os.utime("/path/to/file", (new_time, new_time))
timestomping using Python
0001-01-01
Python can be used to modify timestamps or timestomp files:
import os
import time
new_time = 1672531200 # UNIX timestamp (Jan 1, 2023)
os.utime("/path/to/file", (new_time, new_time))
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron