MAC times

Dan Farmer posted a short article/paper about MACtimes and forensics at Dr Dobb's some time ago (here's the link). It might not have the level of detail you're after but it's a nice intro covering UNIX and NTFS basics.

Cheers,

Jamie

Mark,

Not sure what you're looking for, but

http//msdn.microsoft.com/library/default.asp?url=/library/en-us/sysinfo/base/file_times.asp
http//support.microsoft.com/?kbid=299648

Another interesting read is the paper "The Rules of Time on NTFS File System", that you can download from http//i.cs.hku.hk/~cisc/forensics/papers/RuleOfTime.pdf

Thanks everyone for your comments.

I have read the article posted on Dr Dobbs, and it was good. I will check out the others.

Mark