Difference between pages "MAC times" and "Mobile phones"

From ForensicsWiki
(Difference between pages)
Redirect page
Jump to: navigation, search
 
 
Line 1: Line 1:
'''MAC times''' are timestamps of the latest ''modification'', ''access'' or ''change'' of a certain file.
+
#REDIRECT [[Cellphones]]
 
+
== Disabling Last Access Time Stamp ==
+
 
+
=== [[Windows]] ===
+
 
+
Set the registry key ''HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate'' to ''1''.
+
 
+
This setting is default under [[Windows]] Vista.
+
 
+
=== [[Linux]] ===
+
 
+
Mount [[file system]] with ''noatime'' option.
+
 
+
== Example ==
+
 
+
== See Also ==
+
 
+
* [[Timestomp]]
+
 
+
== External Links ==
+
 
+
* [http://en.wikipedia.org/wiki/MAC_times Wikipedia: MAC times]
+
* [http://www.winguides.com/registry/display.php/50/ Disable the NTFS Last Access Time Stamp]
+
* [http://support.microsoft.com/kb/299648 Microsoft KB 299648: Description of NTFS date and time stamps for files and folders]
+

Revision as of 06:19, 28 March 2006