±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 2 Overall: 36324
New Yesterday: 2 Visitors: 194

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

.Trashes and Resource Fork

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts

Senior Member

.Trashes and Resource Fork

Post Posted: Sep 10, 13 19:24

Hi all,

I am not an Apple expert so was wondering if I could tap your brains?

I have a document on a USB which has a created date of (example dates) 1 Jan 13.

I have a resource fork '._' for this document dated 1 Feb 13.

I have .trashes, .spotlight etc created date 1 Mar 13.

How can I have .trashes etc created after an Apple created resource fork was created as I thought .trashes was created when first inserted? A little confused, but sure there is an explanation?

If it helps, the document may have been a 'doc' file taht was subsequently saved as a 'docx' file at some point...

Many thanks


Page 1 of 1