-
Apple Absolute Time
-
Apple HFS
-
Apple HFS+
-
Binary Coded Decimal (BCD) (2-digit Year)
-
Binary Coded Decimal (BCD) Extended (4-digit Year)
-
Binary Coded Decimal (BCD) Reverse Nibble
-
Google Chrome Timestamp
-
GPS Time
-
GSM Time
-
Microsoft Ticks
-
Motorola Timestamp
-
Microsoft FAT MS-DOS (32-bit) Timestamp
-
Microsoft FAT MS-DOS (40-bit) Timestamp
-
Microsoft MS-DOS (32-bit) wFatDate, wFatTime Timestamp
-
Nokia Series 30
-
Nokia Series 40
-
OLE Automation (64-bit Double)
-
SYSTEMTIME Structure
-
Unix Seconds
-
Unix Milliseconds
-
Unix Microseconds
-
UUID (Guid) Timestamp
-
Windows Filetime
-
Windows Filetime [dwLow:dwHigh]
-
Windows Filetime Mime Boundary [dwHigh.dwLow]
-
Windows Filetime MSIE Cookie [dwLow,dwHigh]
来源：取证杂谈，作者：胡壮
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论