BIOS time change re...
 
Notifications
Clear all

BIOS time change records?

2 Posts
2 Users
0 Reactions
510 Views
(@aquaman)
Active Member
Joined: 14 years ago
Posts: 13
Topic starter  

In the properties of every file, folder and photo there are times and dates of creation and last accessed etc.
However, I think that some of the photos and documents on my pc have been created by a colleague by changing the BIOS time on boot up and/or the software clock time and date in order to demonstrate that they were created some time ago.

Is there anywhere on the computer that I can find out if and when the BIOS and software time and date was changed?

It was mentioned to me that the registry records every time the BIOS clock and the software clock has been changed. Is that true? and if so where would I find it in the registry?

Thanks in advance


   
Quote
(@mjantal)
Eminent Member
Joined: 16 years ago
Posts: 49
 

See if this helps…

http//www.stevebunting.org/udpd4n6/forensics/timechange.htm )


   
ReplyQuote
Share: