Orphan file dates i...
 
Notifications
Clear all

Orphan file dates in FTK

1 Posts
1 Users
0 Reactions
1,723 Views
(@djustice)
New Member
Joined: 4 years ago
Posts: 1
Topic starter  

I am trying to interpret how an orphan file in FTK has an MFT last written date and time that is prior to the file creation date. Could the creation date be when the file was orphaned?


   
Quote
Share: