Page 1 of 1

Add MFT Entry modified for NTFS

Posted: 28 Feb 2021 19:54
by larrybnh673
Hi,

there is no file manager (GUI) on Windows 10 that displays MFT Entry modified timestamps.

Here more information:
https://forensixchange.com/posts/19_04_ ... ime_rules/

Re: Add MFT Entry modified for NTFS

Posted: 07 Mar 2021 09:47
by admin
A rare wish and hard to do. Which makes it interesting.

No time for it currently but I will use this thread as a bookmark pool. This is the first interesting link I found (this might as well open a door to Everything-like speed):
https://stackoverflow.com/questions/216 ... gh-c-sharp