Understanding types of timestamps. – Digitalmunition


Home Forums Understanding types of timestamps.

This topic contains 1 reply, has 2 voices, and was last updated by  BfuckinA 1 month, 2 weeks ago.

  • Author
  • #368925


    I am following [this](https://ctf101.org/forensics/what-is-metadata/) link and can see they have mentioned various types of timestamps. I understood what is Modified, Accessed, Created & Date Changed (MFT) timestamps. I know what is MFT & INDX entry as well, but cannot grasp what the other types mentioned there mean. I tried googling but it doesn’t return any proper results. Would really appreciate if someone could shed some light and enlighten me on the other types.

  • #368927


    I create and save a txt file. This is the created timestamp.

    10 minutes later, I open up and change some values in the file. The modified and access date are updated.

    Another 10 minutes go by and I open and read the file, the access date is updated.

    Does that answer your question?

You must be logged in to reply to this topic.