Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
How can I obtain all timestamps of all files ( starting"/") on a Linux system in order to verify if a file was changed within a breach?
If I'm understanding you correctly and you want to get all files in Linux and their associated timestamps:
find / -printf '%Tc %p\n'
beware of date stomping tho.
Required, but never shown