Powershell experts - is there a way in Powershell (without TSK etc) to extract the MFT metadata change timestamp for a file or do you need to create your own functions?
-
-
Isn't that using fsutil?
-
sure, why is that a problem?
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.