|
-
June 11th, 2008, 06:24 PM
#1
Junior Member
Retrieving the MFT timestamps
Hello,
I'm just starting to get into the security field, and I've just been browsing around. I was using a DiskExplorer and it was able to show me the contents of the NTFS and MFT. I was wondering if anyone could offer any assistance on how I would be able to retrieve the MFT metadata (stuff like the last MFT modification time/access time/creation time etc..)
Any help would be greatly appreciated!
Similar Threads
-
By Ignatius in forum Newbie Security Questions
Replies: 7
Last Post: May 25th, 2006, 11:41 PM
-
By Hades in forum Newbie Security Questions
Replies: 8
Last Post: May 31st, 2005, 05:58 PM
-
By dontease in forum Hardware
Replies: 8
Last Post: January 27th, 2005, 04:03 PM
-
By tatui in forum Computer Forensics
Replies: 3
Last Post: February 2nd, 2003, 10:55 PM
-
By s0nIc in forum Security Archives
Replies: 8
Last Post: December 16th, 2001, 09:39 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote