How do I find the date and time a File/Folder/Software was copied or installed on a Windows 2008 server?
Unless I'm missing something very obvious, I'm dabbling a bit in computer forensics on one of our company servers. I'm trying to determine the date that Folders/Files were copied from a DVD to a shared folder on the server's hard drive.
A Right-Click on the Folder with a look at "Properties" provides me with Date Created. However, the date shown here just doesn't jibe with the memory of those end users who initially used Copy/Paste to place the folder on the hard drive from the DVD.
Is there any way that the Server would have recorded this information?
Windows Server 2008Miscellaneous
8/22/2022 - Mon
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!