Hi guys,
I was wondering what's possible in the realms of forensics when it comes to USB drives, and other external media.
What I'd like to know is:
1) Is there a way of seeing how many times a file has been accessed? (this I'd really like to know)
2) Is there any way to see a history of external devices - USBs, CDs etc, mounted on a mac/pc?
3) Is there any way to see the history of how many times an external USB has been accessed?
4) Is there a way to see if and when files have been deleted?
5) If a file is renamed, does it alter the date created/modified info? (this question is less important)
All info, suggestions or even links to software would be greatly appreciated. Thanks so much.
I was wondering what's possible in the realms of forensics when it comes to USB drives, and other external media.
What I'd like to know is:
1) Is there a way of seeing how many times a file has been accessed? (this I'd really like to know)
2) Is there any way to see a history of external devices - USBs, CDs etc, mounted on a mac/pc?
3) Is there any way to see the history of how many times an external USB has been accessed?
4) Is there a way to see if and when files have been deleted?
5) If a file is renamed, does it alter the date created/modified info? (this question is less important)
All info, suggestions or even links to software would be greatly appreciated. Thanks so much.