Let’s focus on the “database directory” that was found to have been deleted by the auditors. Pay attention to the dates ‘CREATED’ and the size of the ballot file size ‘bytes’
The article's author doesn't fully understand what a created date means in a file system. It does not mean "the day this file was created." It means "the day this file was created on this file system." That's an important distinction. If you have a file with a creation date of 1/1/2020, and you copy it to another drive on 5/13/2021, the copy on the new drive will have a creation date of 5/13/2021. If you create an exact copy of that file on the same file system, the copy will have a creation date of 5/13/2021. The date that won't change is the last-modified date, but these are all easily changeable so they hold almost zero forensic value.
(post is archived)