SecurityFocus

changing file access times Mar 21 2006 03:22PM
Stefan Kelm (stefan kelm secorvo de) (4 replies)

RE: changing file access times Mar 28 2006 04:07PM
Stefan Fleischmann (mail x-ways com) (1 replies)

With any disk editor, of course, and in WinHex in
particular (not its forensic edition, though), if
that NTFS partition is mapped as a drive letter,
with File | Properties.

Regards,

Stefan

--
X-Ways Software Technology AG
Agrippastr. 37-39
50676 Cologne, Germany
Phone: +49-221-420 486 5
http://www.x-ways.net

-----Original Message-----
From: Stefan Kelm [mailto:stefan.kelm (at) secorvo (dot) de [email concealed]]
Sent: Tuesday, March 21, 2006 4:22 PM
To: forensics (at) securityfocus (dot) com [email concealed]
Subject: changing file access times

All,

are there any tools other than NirCmd which allow me to change
last_write_time, creation_time or last_access_time of any given
NTFS file?

Cheers,

Stefan.

-------------------------------------------------------
Stefan Kelm
Security Consultant

Secorvo Security Consulting GmbH
Ettlinger Strasse 12-14, D-76137 Karlsruhe

Tel. +49 721 255171-304, Fax +49 721 255171-100
stefan.kelm (at) secorvo (dot) de [email concealed], http://www.secorvo.de/
-------------------------------------------------------
PGP Fingerprint 87AE E858 CCBC C3A2 E633 D139 B0D9 212B

[ reply ]

RE: changing file access times Mar 28 2006 07:46PM
Matthew Mucker (Matthew Mucker microsoft com)

Re: changing file access times Mar 23 2006 08:10PM
Technica Forensis (forensis technica gmail com)

RE: changing file access times Mar 23 2006 07:30PM
Maxime Ducharme (mducharme cybergeneration com)

Re: changing file access times Mar 22 2006 05:38PM
Ansgar -59cobalt- Wiechers (bugtraq planetcobalt net)