Would there be any "traces" or markings to indicate a file date and time was changed if the hard drive was a slave drive? [no log file or boot sector on it]
How could you tell if any "changing" actions had been taken on a hard drive using a file change program?
How could you tell if any "changing" actions had been taken on a hard drive using a file change program?
Comment