• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

NTFS Drive: When was data deleted?

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response

View previous topic :: View next topic  
Author Message
hiko
Just Arrived
Just Arrived


Joined: 30 Jun 2008
Posts: 0


Offline

PostPosted: Mon Jun 30, 2008 11:19 pm    Post subject: NTFS Drive: When was data deleted? Reply with quote

Hi everybody,

I've got two systems:
- Windows XP Pro
- Windows Vista Home Premium

Some directories where deleted at some point. I've managed to succesfully restore the data but i can't figure out when were the directories deleted.

I think that in NTFS File systems, if file auditing is not turned on previously, there is no way to find the date of deletion. it's just not stored.

I'm correct? Please help.

hiko
Back to top
View user's profile Send private message
Mongrel
SF Mod
SF Mod


Joined: 30 May 2002
Posts: 8


Offline

PostPosted: Fri Aug 08, 2008 7:15 am    Post subject: Reply with quote

You may be right about auditing but THIS PAPER (page 6) discusses
Deleted Date and Timestamp on M$ files in the Recycle Bin. There may be
some help for you there.

In most apps that recover deleted data a date deleted is shown in the
logfile during the recovery process.

Can't stress it enough but THIS GOOGLE sent me there.
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register