![dnc server downloaded in eastern time dnc server downloaded in eastern time](https://www.sme.org/globalassets/sme.org/technologies/articles/2019/10---october/image-3-lcls-undulator-hall.jpg)
“A hacker might have downloaded it to one computer, then shared it by USB to an air gapped network for translation, then copied by a different person for analysis, then brought a new USB to an entirely different air gapped computer to determine a strategy all before it was packaged for Guccifer 2.0 to leak,” said Barger.Įvery time the files were copied, depending on the method they were transmitted, there would be a new chance for the metadata to be changed. “This theory assumes that the hacker downloaded the files to a computer and then leaked it from that computer,” said Rich Barger, director of security research at Splunk.īut, said Barger and other experts, that overlooks the possibility the files were copied multiple times before being released, something that may be more probable than not in a bureaucracy like Russian intelligence. Instead, someone with physical access to the network must have copied them in person to a USB drive, the blogger concluded. That is faster than consumer internet services in the United States can upload documents.Īs a result, Forensicator concluded that the documents could not have been copied over the internet. Based on the size of the documents and the times they were downloaded, Forensicator calculated that a hacker was able to copy the files at a speed of more than 20 megabytes per second. When files are copied to a new device, the metadata can record the time each file finishes being duplicated as the time it was “last modified.”Ī blogger named “The Forensicator” analyzed the "last modified" times in one set of documents released by Guccifer 2.0.
DNC SERVER DOWNLOADED IN EASTERN TIME SOFTWARE
It can include the last date a file is modified and note what software and devices were involved in creating the file, among other information. Metadata is information recorded in a file for archiving purposes and is not displayed when a file is open.