@inproceedings{01a6fbf1988543508ae702eb072ee27d,
title = "Timestamp Change Model in Windows OS",
keywords = "file attributes, file objects, file operations, forensic analysis, MFT, NTFS, timestamps",
author = "Natalia Knyazeva and Evgeny Dukhan",
year = "2020",
month = may,
doi = "10.1109/USBEREIT48449.2020.9117698",
language = "English",
series = "Proceedings - 2020 Ural Symposium on Biomedical Engineering, Radioelectronics and Information Technology, USBEREIT 2020",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "623--626",
booktitle = "Proceedings - 2020 Ural Symposium on Biomedical Engineering, Radioelectronics and Information Technology, USBEREIT 2020",
address = "United States",
note = "2020 Ural Symposium on Biomedical Engineering, Radioelectronics and Information Technology, USBEREIT 2020 ; Conference date: 14-05-2020 Through 15-05-2020",
}