and no, you can't determine the date a cd-rom was created. You could theoretically get the batch number of the cd serial number from the inside track and get the manufacturer give you the date of the cd creation (the blank) - but the date of creation can be completely hidden. It's called an .iso or a .bin file - they keep the original files dates and modification dates as well. Sort of like when we take a hard drive image - it's an exact copy. Hope this helps. Dennis O'Shields Web : http://www.oshields.org Phone: (425) 432-4089 Cell : (206) 852-1916 Fax : (425) 432-4335 Email: dennisat_private -----Original Message----- From: Michael Edwards [mailto:medwards@digital-legal.com] Sent: Friday, July 11, 2003 12:58 PM To: forensicsat_private Subject: Creation / modification / access dates Greetings to the list. Firstly, is there any way to determine the creation date of a CD-ROM - is that information stored somewhere as part of the CDFS? Secondly, I'm looking for recommended reading and / or sources of information on creation / modification / access dates (primarily for Windows) in general. Good primers on what activities do and don't modify them, etc. I've found some information on line, and some of Microsoft's official tech notes on the date formats - but am hoping to find a collected source of information. Thanks for any help! Michael Edwards Blank & Associates P.S. - 206.256.9699 x36 2001 Western Avenue, Suite 250 - Seattle, Washington 98121 CONFIDENTIALITY NOTICE: The contents of this message are intended solely for the person to whom this message is addressed, and may be protected from disclosure or dissemination by the attorney-client privilege or other guarantee of confidentiality. If you believe you have received this message in error, please notify the sender at <mailto:medwards@digital-legal.com>medwards@digital-legal.com and destroy all copies. ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Jul 14 2003 - 05:41:44 PDT