The below guide a very simple guide on how to change a file’s “date modified” and “date created” attributes on Mac OS.
Note:
I am using MacBook Air and current operating System is Big Sur. The below method will definitely work on the latest versions of Mac OS.
Yotube video:
These are default Date Format Keys:
YYYY - For year
MM - Month of the year from 1-12
DD - From 1 to 31.
hh - For hours, from 0 to 23. (Mac OS uses 24 hour format)
mm - From 0 to 59.
You have to use these Date formats in your commands to change the created and modified date on your Mac.
You can easily change any file creation and modification date on your MacBook. You just have to follow couple of simple steps to do it.
When you create or save a document, image or any type of file on your Mac OS, the Finder creates two types of dates- one when it is saved or created and other when you have updated or modified any attributes of that file.
In simple words, When you Import, save, download or create a new file on your Macbook or iMac – the Finder displays the “Date Created” and when you update any current stored image or document on your Mac, it displays the “Modified date.”
Changing the “date modified” attribute of a file on Mac?
Step 1: Terminal
Open Terminal application on your MacBook.
You can open Terminal under Finder >> Applications or
You can also search Terminal in Spotlight and open it up.
Step 2: Enter the Command
Enter the command to change modify file date
touch -mt YYYYMMDDhhmm
Enter the data like this: 199103162215 1991 is for year 03 is for month 16 is the Date 22 is hours and 15 is for seconds Now, open a different finder window and find the file you want to change the modified date. Now just drag and drop it into the Terminal window after the typed command. Press enter and the modified date of any file file document will be changed.
How to change the “date created” of a file on Mac?
This will change both date created and modified attributes of image, documents or any other file on your Mac OS.touch -t 201310211011
Now you have to drag and drop the file in to the terminal. Just make sure that you dop it after the command not before it.
Relevance to Cybersecurity:
a. Digital Forensics and Incident Response:
File metadata, including creation and modification dates, plays a crucial role in digital forensics and incident response. Manipulating these dates can potentially hinder investigations by altering the timeline of events, affecting the accuracy and reliability of evidence.
b. Data Integrity and Authentication:
In cybersecurity, accurate file dates serve as a significant factor in ensuring data integrity and authentication. A discrepancy in file dates could indicate tampering or unauthorized access, making it essential for cybersecurity professionals to understand when and how these dates might be altered, both for defensive and investigative purposes.
Use Cases in Cybersecurity:
a. Incident Response Scenarios:
Cybersecurity analysts might legitimately alter file dates during incident response to preserve the chain of custody or ascertain the extent of a security incident. However, improper modification might compromise the accuracy and credibility of evidence collected during investigations.
b. Data Protection and Privacy:
Changing file dates can sometimes be employed as a security measure to protect sensitive information from unauthorized access. However, this should be exercised cautiously, as misleading file dates could potentially undermine trust and lead to legal implications in case of breaches or audits.
