ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between pages "MAC times" and "Mobile phones"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
+
#REDIRECT [[Cellphones]]
 
+
== Disabling Last Access Time Stamp ==
+
 
+
=== [[Windows]] ===
+
 
+
Set the registry key ''HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate'' to ''1''.
+
 
+
This setting is default under [[Windows]] Vista.
+
 
+
=== [[Linux]] ===
+
 
+
Mount [[file system]] with ''noatime'' option.
+
 
+
== Example ==
+
 
+
== See Also ==
+
 
+
* [[Timestomp]]
+
 
+
== External Links ==
+
 
+
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
+
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
+
* [http://support.microsoft.com/kb/299648 Microsoft KB 299648: Description of NTFS date and time stamps for files and folders]
+

Revision as of 11:19, 28 March 2006

Redirect to: