Glossary: Network Attacks, Social Engineering and Indicators

timestomping

Also written: timestomped, T1070.006

Changing a file's timestamps to hide when it was really created or changed, as with netsvc on the order server. An old modify time with a recent change time is a clue, but only when other evidence backs it up.