Digital forensic investigations require that file metadata are interpreted correctly. In this paper we focus on the timestamps of exFAT system. How these written may depend implementation We have performed experiments using Windows, MacOS and Linux to examine whether respective system drivers for use in same manner, they take directory entry UTCOffset fields into account. also studied tools: Au...