I got a call from an investigator doing a Limewire investigation. The Limewire part doesn't matter so much as the OS being Vista. He has files showing the same Date Created and Last Accessed, but a more recent Date Modified. As far as we can tell, the files have not been moved or changed.

We just need to explain why/how a file can be modified without being accessed.

Any thoughts?