I’m searching by date, to determine unauthorised file modifications.
`find $HOME -type f -mtime -30`
Does a search for all files modified less than 30 days ago. Are crackers/hackers known for using `touch` to modify timestamps? or is date scanning a suitable technique?