Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • You just beat me. I was about to answer github.com/jschicht/Mft2Csv/wiki/Mft2Csv ;)
    – DavidPostill
    Commented Sep 15, 2015 at 21:31
  • @DavidPostill well, MFTRCRD is better for this, as I don't want to be opening up excel just to view timestamps for one individual file. Mft2Csv is good but for viewing for more than just one file.
    – barlop
    Commented Sep 16, 2015 at 3:29
  • @DavidPostill if you were planning on posting an answer even half as long as the one I did / one that adds any more info that is too much for a comment, then an answer from you may still be useful!
    – barlop
    Commented Sep 16, 2015 at 21:54
  • may be relevant forensicswiki.org/wiki/MAC_times
    – barlop
    Commented Apr 23, 2016 at 19:00