This topic contains 1 reply, has 2 voices, and was last updated by BfuckinA 1 month, 2 weeks ago.
- March 3, 2021 at 7:55 pm #368925
I am following [this](https://ctf101.org/forensics/what-is-metadata/) link and can see they have mentioned various types of timestamps. I understood what is Modified, Accessed, Created & Date Changed (MFT) timestamps. I know what is MFT & INDX entry as well, but cannot grasp what the other types mentioned there mean. I tried googling but it doesn’t return any proper results. Would really appreciate if someone could shed some light and enlighten me on the other types.
- March 3, 2021 at 7:55 pm #368927
I create and save a txt file. This is the created timestamp.
10 minutes later, I open up and change some values in the file. The modified and access date are updated.
Another 10 minutes go by and I open and read the file, the access date is updated.
Does that answer your question?
You must be logged in to reply to this topic.