From ForensicsWiki
Revision as of 14:03, 25 October 2007 by Jessek (Talk | contribs)

Jump to: navigation, search

This article references "MACE" values which I've never heard of. Now, humbly, that doesn't mean a whole lot ;) but I was curious if the author of this page meant to write MAC values instead. Thoughts? AEI Forensics

I'm a n00b ;) I just remembered what the E stands for (the Master File Table Entry Modified time stamp of the file). Do we have a page on here for a proper explanation of the MACE acronym? AEI Forensics
We don't have an article on timestamps per se, but I think it would make a great addition to the NTFS page. Can you help us write it? I've made start. Jessek