Difference between pages "Printers" and "MAC times"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Printer links.)
 
m
 
Line 1: Line 1:
...
+
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
 +
 
 +
With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
 +
 
 +
== Example ==
  
 
== External Links ==
 
== External Links ==
  
* [http://en.wikipedia.org/wiki/Printer_steganography Printer steganography]
+
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
* [http://en.wikipedia.org/wiki/Microprinting Microprinting]
+
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
* [http://www.eff.org/Privacy/printers/ EFF: Is Your Printer Spying On You?]
+

Revision as of 11:43, 19 April 2008

MAC times are timestamps of the latest modification, access or change of a certain file.

With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.

Example

External Links