Difference between pages "MAC times" and "Hash (Maresware)"
From Forensics Wiki
(Difference between pages)
|
|
| Line 1: |
Line 1: |
| − | '''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
| + | {{expand}} |
| − | With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
| + | |
| | | | |
| − | == Example == | + | == See Also == |
| | + | * [[Hashcmp]] |
| | | | |
| | == External Links == | | == External Links == |
| | + | * [http://www.maresware.com/maresware/html/hash.htm Official web site] |
| | | | |
| − | * [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
| + | [[Category:Hashing]] |
| − | * [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
| + | |
Latest revision as of 07:13, 17 March 2008
|
|
Please help to improve this article by expanding it.
Further information might be found on the discussion page.
|
[edit] See Also
[edit] External Links
