Tag Archives: mft

Revisiting Get-FileTimestamp with Reflection

Ever since I wrote my function to locate a file’s MFT (ChangeTime) timestamp, I wanted to take on an extra challenge by taking all of the C# code that included using pinvoke and rewrite it using reflection in PowerShell after … Continue reading

Posted in powershell | Tagged , , , , , , | 2 Comments

Finding a File’s MFT Timestamp using PowerShell

During my last couple of articles dealing with writing and reading files without updating their LastAccess and LastWrite timestamps which has seen a bit of popularity from folks.  While these methods work great for the casual onlooker, digging down deeper … Continue reading

Posted in powershell | Tagged , , , , , | 2 Comments