4Kas
Can Benford’s law be used for the purpose of detecting deviations in a file metadata dates?
Considering the metadata such as creation and modification datetimes of files in terms of computer forensics. If tampering of such metadata date information is expected, can Benford's law be used to proof or disprove the act of altered metadata? And if so, why?
Alternatively, what other methods could be used for this purpose.
