The $Filename structure is difficult to modify from the user-level OS.
Discrepancies between the $Standard_Information and $Filename may reveal possible timestomping (anti-forensics)