— Sloth Boss
Every file has a story to tell through its metadata. This study guide identifies key file system metadata fields, such as timestamps (Modified, Accessed, Created), permissions, and file size. You'll learn how this data, which is stored separately from the file's content, can be used to build a timeline of events during a forensic investigation. Analyzing metadata is a fundamental skill for any digital detective trying to answer 'who, what, when, and where'.