Notifications
Clear all
30/10/2013 3:19 am
i have txt file in drive d
can i prove that it hasnn't been copied from drive c ?
through $logfile
thanksin other words how can i access $logfile of that text file?
thanks in advance
A $logfile question!
Hi there! Questions for you
1. What version of Windows is the computer you are analyzing
2. Is the 'D' Drive also NTFS?
3. How long between the creation date of the file on the D drive and the creation of the forensic image was the computer active?
Page 2 / 2
Prev