Difference between pages "MAC times" and "Hash (Maresware)"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
Line 1: Line 1:
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
== Example ==
== See Also ==
* [[Hashcmp]]
== External Links ==
== External Links ==
* [http://www.maresware.com/maresware/html/hash.htm Official web site]
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]

Latest revision as of 12:13, 17 March 2008

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

See Also

External Links