I apologize for turning here with a question, my research both searching here and on Google has only turned up useless information.
I believe that someone has sent me files that have had their file creation date altered via a program like the ones listed here.
Is there any way to detect spoofed file modification performed with utilities such as these?
Edit: The files in question were created using Adobe InDesign and "sent me some files" in this case is a USB thumb drive where the files were copied and sent to me.
Edit 2: In hopes of maybe culling one of two somewhat "duplicate" questions, I'll post here and assign a correct answer here if someone comes up with one. This is the much more complete context for where I am with this:
I have an Adobe InDesign document with the following
created action in
<xmpMM:History>. There seems to be a discrepancy in the file, as
<stEvt:softwareAgent> reports Adobe InDesign CC 14.0 which was released in November 2018, but the "created" action is timestamped 2017-04-03T16:16:19-04:00.
My question is this -- does this XMP tag
<stEvt:softwareAgent> get overwritten such that it is normal to see this tag not match the version originally used to create the file?
<xmpMM:History> <rdf:Seq> <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:da3ade9b-b298-4414-a7ad-8dc125eab74d</stEvt:instanceID> <stEvt:when>2017-04-03T16:16:19-04:00</stEvt:when> <stEvt:softwareAgent>Adobe InDesign CC 14.0 (Macintosh)</stEvt:softwareAgent> </rdf:li>