Click here to Skip to main content
Rate this: bad
good
Please Sign up or sign in to vote.
See more: C++ C
I used the code from http://www.tenouk.com/ModuleA1.html to list files and their attributes in a directory.
 
I can list files timeline: create time, last access time, last write time.
 
However, there's another timeline that I don't know how to list which is the MFT (Master File Table) modified/changed time. Please help. Your help will be greatly appreciated.
Posted 9-Jan-12 6:46am
Edited 9-Jan-12 6:47am
Mehdi Gholam254.2K
v2
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 1

I don't think the information you are looking for is available; see here[^].
  Permalink  
Comments
Chi Pheo at 9-Jan-12 20:05pm
   
Richard - Thanks for your reply. I found out that someone wrote a program called "Time Stomp". The screenshot is listed on http://www.forensicswiki.org/wiki/File:Timestomp_mace_change.jpg. That's exactly what I'm looking for. I don't want to modify timeline but just wanted to list those 4 timelines. Is there any way I can find a source code for "Time Stomp"?
Richard MacCutchan at 10-Jan-12 3:24am
   
Maybe Google can help you, or find the person who wrote it.
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 2

If you want a cross platform solution and easy to work with then you can try to use POCO Framework[^].
  Permalink  
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 3

Check this Method[^] to get file attributes
and this Method[^] to find the files
  Permalink  
v2

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
0 DamithSL 325
1 Maciej Los 217
2 OriginalGriff 213
3 BillWoodruff 79
4 Jose Garcia Sevilla 75
0 OriginalGriff 7,953
1 DamithSL 6,139
2 Sergey Alexandrovich Kryukov 5,454
3 Maciej Los 5,293
4 Kornfeld Eliyahu Peter 4,539


Advertise | Privacy | Mobile
Web01 | 2.8.141223.1 | Last Updated 11 Jan 2012
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100