And this is why NetWare is nice....
from ndir *.* /d on a network created stored file....
" <server name>/VOL1:USERS\DHIBBELN\README.TXT
Files:
DOS: README.TXT
OS/2: README.TXT
Rights:
DOS, OS/2: Inherited: [SRWCEMFA]
Effective: [--------]
Owner: DOS, OS/2: dhibbeln
Owning namespace: OS2
Miscellaneous NetWare information:
Last update: 12/21/98 1:36p
Last archived: 7/02/01 3:24a
Last accessed: 7/02/01
Created/Copied: 11/14/99 9:47a
Flags: [Ro----] [-------DiRi------] [---]
File size: 18,659
18,659 bytes (18,944 bytes of disk space used)
1 File
Regards,
David R. Hibbeln
-----Original Message-----
From: Bill Royds [mailto:broydsat_private]
Sent: Saturday, June 30, 2001 1:15 PM
To: Martin, Ava; forensicsat_private; iacis-lat_private
Subject: RE: File times?
The reason is that the sources of those two tabs are completely different.
The GENERAL tab represents the Operating System times in the directory.
The STATISTICS tab represent the application times stored in the file
itself.
If a file is moved to a machine with a munged date/time setting, the
GENERAL tab stuff may change to an incorrect time, but internal time does
not change.
Similarly, if the file is edited on a machine with a different date/time
setting, then the STATISTICS times can change without the OS times in
GENERAL changing.
-----Original Message-----
From: Martin, Ava [mailto:Ava.Martinat_private]
Sent: Friday, June 29, 2001 10:55
To: forensicsat_private; iacis-lat_private
Subject: File times?
Good Morning All,
Using Windows NT 4.0 file manager to review the file properties for files
located on a floppy I came across something I don't understand and hope one
or more of you may have an answer.
The GENERAL tab of the file properties gives you the created, modified and
accessed dates and times for file.
The STATISTICS tab also gives you the same categories but also gives you a
printed date and time.
For one of the files that I'm reviewing, the created date and time are
different between the GENERAL and STATISTICS tabs. The GENERAL one is July
7, 2000 and the STATISTICS one is July 10, 2000. The printed field
indicates the file was printed on July 9, 2000.
Does anyone know why the created dates could be different for the same file?
How would I explain how a document could be printed before it is created?
I am confident that someone out there has ran into this before and I
apologize if this has been covered previously.
Respectfully,
Ava M. Martin
email: ava.martinat_private
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:
http://aris.securityfocus.com
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:
http://aris.securityfocus.com
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:
http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Tue Jul 03 2001 - 06:53:36 PDT