Difference between pages "MAC times" and "Mobile phones"
From Forensics Wiki
(Difference between pages)
|
|
| Line 1: |
Line 1: |
| − | '''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
| + | #REDIRECT [[Cellphones]] |
| − | | + | |
| − | == Disabling Last Access Time Stamp ==
| + | |
| − | | + | |
| − | === [[Windows]] ===
| + | |
| − | | + | |
| − | Set the registry key ''HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate'' to ''1''.
| + | |
| − | | + | |
| − | This setting is default under [[Windows]] Vista.
| + | |
| − | | + | |
| − | === [[Linux]] ===
| + | |
| − | | + | |
| − | Mount [[file system]] with ''noatime'' option.
| + | |
| − | | + | |
| − | == Example ==
| + | |
| − | | + | |
| − | == See Also ==
| + | |
| − | | + | |
| − | * [[Timestomp]]
| + | |
| − | | + | |
| − | == External Links ==
| + | |
| − | | + | |
| − | * [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
| + | |
| − | * [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
| + | |
| − | * [http://support.microsoft.com/kb/299648 Microsoft KB 299648: Description of NTFS date and time stamps for files and folders]
| + | |
Revision as of 06:19, 28 March 2006
- REDIRECT Cellphones
