Orphan file dates i...
 
Notifications
Clear all

Orphan file dates in FTK

1 Posts
1 Users
0 Likes
1,151 Views
(@djustice)
Posts: 1
New Member
Topic starter
 

I am trying to interpret how an orphan file in FTK has an MFT last written date and time that is prior to the file creation date. Could the creation date be when the file was orphaned?

 
Posted : 13/10/2021 6:47 pm
Share: