期刊文献+

Windows系统中文件时间属性的变化及影响因素 被引量:2

Change and influencing factors of file time attribute in Windows System
下载PDF
导出
摘要 目的分析Windows系统中不同因素对文件时间属性的影响,总结文件时间属性的变化规律。方法在FAT32和NTFS两种文件系统中,对文件和文件夹进行各种操作,记录其时间属性的变化情况,总结其规律并分析各种因素的影响。结果文件时间属性的更新与系统环境、操作方法、文件类型等因素有关,而且文件时间属性更新有特定的周期。结论Windows系统中文件时间属性的变化既有特定的规律,又受其它因素影响,在检验中应加以注意。 Objective To analyze the influence of different factors on file time attribute in Windows system and summarize the changes of file time attribute.Method Apply all kinds of operations on files and folders in both NTFS and FAT32 file systems,record the change of file time attribute and then conclude the pattern and other influencing factors.Result The update of file time attribute is affected by system environment,different operations,the type of files and many other factors,and there is a special period of time between each updating.Conclusion The change of file time attribute follows a certain pattern and is also influenced by some other factors that must be respected in examination.
出处 《刑事技术》 2009年第5期3-5,共3页 Forensic Science and Technology
关键词 电子物证检验 文件时间属性 MAC时间 electronic forensics file time attribute MAC-time
  • 相关文献

参考文献4

  • 1DanFarmer,WietseVenema.计算机取证(英文版)[M].北京:机械工业出版社,2006.
  • 2Carvey H. Windows Forensic Analysis[M]. Burlington: Syngress Publishing, 2007.
  • 3Microsoft Developer Network. File Time[EB/OL]. ht tp://msdn. microsoft.com/en-us/library/ms724290 (VS. 85). aspx,2008.
  • 4Microsoft TechNet. NtfsDisableLastAccessUpdate[EB/ OL]. http..//www. microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/46656.mspx? mfr= true, 2008.

同被引文献6

引证文献2

二级引证文献3

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部