Powershell experts - is there a way in Powershell (without TSK etc) to extract the MFT metadata change timestamp for a file or do you need to create your own functions?
-
Isn't that using fsutil?
-
-
I asked about powershell.
-
i asked about a pony for chrismas - but i am also not getting that..... i ask because until that response i wouldnt have minded reversing fsutil so you could do it in powershell- but before i do that i need to know why its not good enough to run the exe and parse the text.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.