Hi everyone!
I am working (studying) on a case that has some puzzling dates. The disk image is from a USB drive date 2017. The files of interest were modified in 2002 (I would say written and saved then) and created in 2005 (saved onto USB). But it is a murder case so the suspect would have every reason to tamper the files. Why would he backdate it to 12 years prior to the murder? Is there a nuance in the dates definition that i am missing? TIA