Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//NOFORN
3.15 Modified Before
The “modified_before” verb states that a directory was last modified before a
given time.
Usage
directory(<dir_path>).modified_before(<time>)
dir_path
Path to directory on target file system
time
Time (in UTC) to compare against the directory timestamp
Provided in one of the following formats
- yyyy-mm-ddThh:mm:ss (ISO 9601)
- yyyy-mm-dd
Truth Table
TRUE
dir_path was last modified before time
FALSE
dir_path was last modified after time
INVALID
dir_path does not exist, is not a directory, or access was denied
97
SECRET//NOFORN