Click here to Skip to main content
15,892,059 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
I used the code from http://www.tenouk.com/ModuleA1.html to list files and their attributes in a directory.

I can list files timeline: create time, last access time, last write time.

However, there's another timeline that I don't know how to list which is the MFT (Master File Table) modified/changed time. Please help. Your help will be greatly appreciated.
Posted
Updated 9-Jan-12 5:47am
v2

I don't think the information you are looking for is available; see here[^].
 
Share this answer
 
Comments
Chi Pheo 9-Jan-12 20:05pm    
Richard - Thanks for your reply. I found out that someone wrote a program called "Time Stomp". The screenshot is listed on http://www.forensicswiki.org/wiki/File:Timestomp_mace_change.jpg. That's exactly what I'm looking for. I don't want to modify timeline but just wanted to list those 4 timelines. Is there any way I can find a source code for "Time Stomp"?
Richard MacCutchan 10-Jan-12 3:24am    
Maybe Google can help you, or find the person who wrote it.
If you want a cross platform solution and easy to work with then you can try to use POCO Framework[^].
 
Share this answer
 
Check this Method[^] to get file attributes
and this Method[^] to find the files
 
Share this answer
 
v2

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900