| <<< The $STANDARD_INFORMATION DOS permissions | Index | The $ATTRIBUTE_LIST Attribute >>> |
MAC times are stored in a number of places in an NTFS file entry
$STANDARD_INFORMATION timestamps are kept current.
$FILE_NAME timestamps are outdated!
File access time is the last time that the file was accessed in any way and has a granularity of 1 hour.
(This prevents constant excessive update to the metadata.)
Windows converts
the MAC times from the local time to UTC time, and stores UTC time.
UTC time to local time for display
Interpretation problems occur if disk is examined on a system with a different time zone setting.
| <<< The $STANDARD_INFORMATION DOS permissions | Index | The $ATTRIBUTE_LIST Attribute >>> |