DFIR120 – NTFS Timestamps 2018-12-25 (2022-05-15) Mat The first episode of DFIR in 120 seconds covers NTFS timestamps. They are frequently misinterpreted even by seasoned security professionals.