Orphan file dates i...
 
Notifications
Clear all

Orphan file dates in FTK

djustice
(@djustice)
New Member

I am trying to interpret how an orphan file in FTK has an MFT last written date and time that is prior to the file creation date. Could the creation date be when the file was orphaned?

Quote
Topic starter Posted : 13/10/2021 7:47 pm
Share: