https://www.sans.org/reading-room/whitepapers/forensics/detection-backdating-system-clock-windows-37682