|
|||||
|
|
| Windows系统中文件时间属性的变化及影响因素 | |
| 引用本文： | 滕冲,方靖然,张国臣. Windows系统中文件时间属性的变化及影响因素[J]. 刑事技术, 2009, 0(5): 3-5 |
| 作者姓名： | 滕冲 方靖然 张国臣 |
| 作者单位： | 1. 中国人民公安大学,北京,100038 2. 广东省深圳市南山区公安分局刑警大队,518052 3. 公安部物证鉴定中心,北京,100038 |
| 摘 要： | 目的分析Windows系统中不同因素对文件时间属性的影响,总结文件时间属性的变化规律。方法在FAT32和NTFS两种文件系统中,对文件和文件夹进行各种操作,记录其时间属性的变化情况,总结其规律并分析各种因素的影响。结果文件时间属性的更新与系统环境、操作方法、文件类型等因素有关,而且文件时间属性更新有特定的周期。结论Windows系统中文件时间属性的变化既有特定的规律,又受其它因素影响,在检验中应加以注意。 |
| 关 键 词： | 电子物证检验 文件时间属性 MAC时间 |
Change and influencing factors of file time attribute in Windows System |
|
| TENG Chong,FANG Jing-ran,ZHANG Guo-chen. Change and influencing factors of file time attribute in Windows System[J]. Forensic Science and Technology, 2009, 0(5): 3-5 | |
| Authors: | TENG Chong FANG Jing-ran ZHANG Guo-chen |
| Affiliation: | (Chinese People＇s Public Security University,Beijing 100038,China) |
| Abstract: | Objective To analyze the influence of different factors on file time attribute in Windows system and summarize the changes of file time attribute.Method Apply all kinds of operations on files and folders in both NTFS and FAT32 file systems,record the change of file time attribute and then conclude the pattern and other influencing factors.Result The update of file time attribute is affected by system environment,different operations,the type of files and many other factors,and there is a special period of time between each updating.Conclusion The change of file time attribute follows a certain pattern and is also influenced by some other factors that must be respected in examination. |
| Keywords: | electronic forensics file time attribute MAC-time |
| 本文献已被 维普 万方数据 等数据库收录！ | |