Closed
Description
Autopsy does not add MACB times from logical file data sources. However, analysis can be aided legally restricted to data created during specific time frames.
While date stamps can be confusing/misleading in from logical sources, it should be up to the examiner to determine the validity and meaning of available time stamps. They should not be excluded by default, or at the very least, should optional.