Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20112

General Discussion: Recycle Bin with X-Ways

$
0
0
I am examining a Windows 7 OS installed on an SSD with X-Ways 17.3. A large number of files show the same "Record Update" date and time or are within milliseconds of same time. They are shows as "Previously Existing Files". Several of files have the exact same Created, Modified, Accessed and Record Update data and time. Can I interpret this date as the date the Recycle Bin was emptied? Is there another way to confirm it?

Viewing all articles
Browse latest Browse all 20112