DATARECOVERYUNION.COM

Windows – How can I display all 8 NTFS timestamps?

I understand that there are 8 NTFS timestamps http://www.governmentsecurity.org/forum/topic/30896-frustrating-ntfs-time-stamp-forensics/   NTFS MACE (Modified, Accessed, Created and MFT Entry modified ) values  . NTFS comes with 8 time-stamp values 4 of which resides in  $Standard_Information attribute (SI) and the other 4 in $FILE_NAME  (FN) attribute of MFT entry. How can I display all 8? Solution: This…

Read More

Windows – How can I display the time stamp of a file with seconds, from the command line?

How can I display the time stamp of a file with seconds, (creation date/time, modified date/time, and access date/time.  All, with seconds). from the command line? Solution: You could use PowerShell to get that information. Start PowerShell from the startmenu Use: Get-ChildItem <<File or Folder>> -Force | Select-Object FullName, CreationTime, LastAccessTime, LastWriteTime, Mode, Length It…

Read More

Windows – How can I find out the command line options for git-bash.exe?

Apparently my google-fu sucks… I know these from other StackExchange posts: –cd-to-home    # Change directory to home–cd=<path>     # Change directory to <path>-i              # ?-c              # Run command, but –command doesn’t work/exist Where can I find a complete list of options for git-bash.exe (the therminal emulator)? I found them for mintty [1], but they don’t seem…

Read More