Forensics: Dates and the $Standard_Information Attribute

Below is a video showing the $Standard_Information Attribute within the MFT

Advertisements

One Response to “Forensics: Dates and the $Standard_Information Attribute”

  1. Forensics: What is the $MFT? « Data – Where is it? Says:

    […] Created Date, Entry Modified Date, Accessed Date and Last Written Date, in the StandardInformation Attribute. […]


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: