0 votes
in Security Incident Management and Forensics by
How to detect whether a file has changed in the system?

1 Answer

0 votes
by

The reason for changing a file could be unauthorized access or malware. One way to compare the change in files is through hashing (MD5).

...