Posted: Sun Feb 08, 2015 8:54 pm Post subject: Doubts about forensic information
I have some doubts about forensic information:
1) Is possible to know when an account was created from registry keys?
2) Is possible using any tool to change LastWrite registry keys? If it is possible, how to know?
3) For files and folders I have read it is possible to change date. How is possible to detect this?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum