RE: Creation / modification / access dates

From: Dennis P. O'Shields <dennis(at)oshields.org>
Date: Sun Jul 13 2003 - 13:35:22 EDT

and no, you can't determine the date a cd-rom was created. You could theoretically get the batch number of the cd serial number from the inside track and get the manufacturer give you the date of the cd creation (the blank) - but the date of creation can be completely hidden. It's called an .iso or a .bin file - they keep the original files dates and modification dates as well. Sort of like when we take a hard drive image - it's an exact copy.

Hope this helps.

Dennis O'Shields

Web  : 
http://www.oshields.org
Phone: (425) 432-4089
Cell : (206) 852-1916
Fax  : (425) 432-4335
Email: dennis@oshields.org

-----Original Message-----
From: Michael Edwards [mailto:medwards@digital-legal.com] Sent: Friday, July 11, 2003 12:58 PM
To: forensics@securityfocus.com
Subject: Creation / modification / access dates

Greetings to the list.

Firstly, is there any way to determine the creation date of a CD-ROM - is that information stored somewhere as part of the CDFS?

Secondly, I'm looking for recommended reading and / or sources of information on creation / modification / access dates (primarily for Windows) in general. Good primers on what activities do and don't modify them, etc. I've found some information on line, and some of Microsoft's official tech notes on the date formats - but am hoping to find a collected source of information.

Thanks for any help!

Michael Edwards
Blank & Associates P.S. - 206.256.9699 x36 2001 Western Avenue, Suite 250 - Seattle, Washington 98121

CONFIDENTIALITY NOTICE: The contents of this message are intended solely for the person to whom this message is addressed, and may be protected from disclosure or dissemination by the attorney-client privilege or other guarantee of confidentiality. If you believe you have received this message in error, please notify the sender at <mailto:medwards@digital-legal.com>medwards@digital-legal.com and destroy all copies.

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Mon Jul 14 09:00:43 2003