1

why does FTK have different MAC times than actual LNK files?

When viewing LNK files FTK posts MAC times i.e.  created11/4/15 accessed 11/415 modified11/4/15 but when viewing the properties tab of the file I get

created 7/23/15 accessed 8/12/15 modified7/23/15

2 comments

Please sign in to leave a comment.