Thanks for the response, Troy. However, my question still stands: >...so has anyone used this > information when investigating a security > incident? Your response never addressed the issue of LastWrite times directly. I ask about this particular topic, as I'm curious if it's ever been used as evidence in a security incident, and if so, what are the particulars. Thanks. HC
This archive was generated by hypermail 2b30 : Wed May 30 2001 - 08:19:38 PDT