ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between pages "Printers" and "MAC times"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Printer links.)
 
m
 
Line 1: Line 1:
...
+
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
 +
 
 +
With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.
 +
 
 +
== Example ==
  
 
== External Links ==
 
== External Links ==
  
* [http://en.wikipedia.org/wiki/Printer_steganography Printer steganography]
+
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
* [http://en.wikipedia.org/wiki/Microprinting Microprinting]
+
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
* [http://www.eff.org/Privacy/printers/ EFF: Is Your Printer Spying On You?]
+

Revision as of 16:43, 19 April 2008

MAC times are timestamps of the latest modification, access or change of a certain file.

With Windows Vista, the registry key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate' is set to '1' by default, which means that no last access timestamp will be written at all.

Example

External Links