-
November 23rd, 2003, 01:33 AM
#1
registry key creation time/date stamp?
Ok, is it possible to find the date that a registry key was created without having installed a 3rd party software ahead of time? Regedit doesn't do it (unless I am completely missing something), and I can't seem to find any documentation that states otherwise.
There's a time/date stamp for file modification/access/creation, I would think there is something similar for registry keys...but I keep running into dead ends...
Why is this in the forensics section? Let's say hypothetically a program was installed on my computer, and I know the approximate date, but not the program...
So someone please tell me, am I just having a huge case of aggravated stupidity?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|