Click here to Skip to main content
12,360,631 members (57,957 online)
Rate this:
 
Please Sign up or sign in to vote.
See more: C++ C
I used the code from http://www.tenouk.com/ModuleA1.html to list files and their attributes in a directory.

I can list files timeline: create time, last access time, last write time.

However, there's another timeline that I don't know how to list which is the MFT (Master File Table) modified/changed time. Please help. Your help will be greatly appreciated.
Posted 9-Jan-12 5:46am
Updated 9-Jan-12 5:47am
Mehdi Gholam311.9K
v2
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 1

I don't think the information you are looking for is available; see here[^].
  Permalink  
Comments
Chi Pheo 9-Jan-12 20:05pm
   
Richard - Thanks for your reply. I found out that someone wrote a program called "Time Stomp". The screenshot is listed on http://www.forensicswiki.org/wiki/File:Timestomp_mace_change.jpg. That's exactly what I'm looking for. I don't want to modify timeline but just wanted to list those 4 timelines. Is there any way I can find a source code for "Time Stomp"?
Richard MacCutchan 10-Jan-12 3:24am
   
Maybe Google can help you, or find the person who wrote it.
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 2

If you want a cross platform solution and easy to work with then you can try to use POCO Framework[^].
  Permalink  
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 3

Check this Method[^] to get file attributes
and this Method[^] to find the files
  Permalink  
v2

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
Top Experts
Last 24hrsThis month


Advertise | Privacy | Mobile
Web02 | 2.8.160621.1 | Last Updated 11 Jan 2012
Copyright © CodeProject, 1999-2016
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100