Difference between pages "MAC times" and "Hash (Maresware)"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
 
Line 1: Line 1:
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
+
{{expand}}
With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
+
  
== Example ==
+
== See Also ==
 +
* [[Hashcmp]]
  
 
== External Links ==
 
== External Links ==
 +
* [http://www.maresware.com/maresware/html/hash.htm Official web site]
  
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
+
[[Category:Hashing]]
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
+

Latest revision as of 07:13, 17 March 2008

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

See Also

External Links