Joined: Nov 01, 2005 Posts: 551 Location: Marion, Indiana, USA
Posted: Sat Sep 07, 2013 9:39 pm Post subject:
And this has to do with Computer Forensics how?
The install date is stored in the registry value as UNIX time (32-bit value containing the number of seconds since 1/1/1970)
Of course if you are trying to make it seem that the system was installed earlier or later, you would have to change metadata on every file too.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum