摘要
随着微软公司新一代的操作系统Vista、Win7及其服务器版本越来越广泛的应用,调查人员在进行时间戳调查的时候需要注意新的问题,本文将通过大量的实例讲述对文件的创建时间、修改时间、访问时间调查时需要注意的问题。
With Microsoft's next-generation operating system, Vista, Win7 and the server version more widely used, many of the time stamp when the survey questions need to pay attention as the new investigators will need to understand, this article will talk about for instance through a lot file creation time, modify time, access time to investigate the main issues when the need to pay attention.
出处
《信息网络安全》
2010年第11期63-65,共3页
Netinfo Security
关键词
创建时间
修改时间
访问时间
时间调查
Creation time
Modification time
Access times
Timestamp forensics
