<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Anti-Forensics &#187; Windows Commands</title>
	<atom:link href="http://www.anti-forensics.com/category/operating-systems/windows/windows-commands/feed" rel="self" type="application/rss+xml" />
	<link>http://www.anti-forensics.com</link>
	<description>Rendering computer investigations irrelevant</description>
	<lastBuildDate>Thu, 15 Dec 2011 07:57:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Disable the LastAccess Timestamp in Windows XP</title>
		<link>http://www.anti-forensics.com/disable-the-lastaccess-timestamp-in-windows-xp</link>
		<comments>http://www.anti-forensics.com/disable-the-lastaccess-timestamp-in-windows-xp#comments</comments>
		<pubDate>Mon, 09 Feb 2009 07:26:58 +0000</pubDate>
		<dc:creator>Max</dc:creator>
				<category><![CDATA[Windows Commands]]></category>
		<category><![CDATA[Trail obfuscation]]></category>

		<guid isPermaLink="false">http://www.anti-forensics.com/?p=17</guid>
		<description><![CDATA[Requirements Administrator account Windows XP Command Summary Login as Administrator Open a command prompt Enter the command: fsutil behavior set disablelastaccess 1 Restart computer Purpose I&#8217;ll come right out and say that this is definitely not a strong anti-forensic technique but it can be helpful. Most forensic examiners already know they can&#8217;t rely heavily on lastaccess [...]
Related posts:<ol>
<li><a href='http://www.anti-forensics.com/disable-thumbnail-caching-and-wipe-thumbsdb-files-on-a-windows-xp-system' rel='bookmark' title='Disable Thumbnail Caching and Wipe Thumbs.db files on a Windows XP System'>Disable Thumbnail Caching and Wipe Thumbs.db files on a Windows XP System</a> <small>The thumbs.db file on a Windows XP system can be...</small></li>
<li><a href='http://www.anti-forensics.com/beat-encase-file-signature-analysis-on-a-windows-system' rel='bookmark' title='Beat EnCase File Signature Analysis on a Windows System'>Beat EnCase File Signature Analysis on a Windows System</a> <small>Use a hex editor to modify the file signature of...</small></li>
<li><a href='http://www.anti-forensics.com/modify-ntfs-timestamps-and-cover-your-tracks-with-timestomp' rel='bookmark' title='Modify NTFS Timestamps and Cover Your Tracks With Timestomp.exe'>Modify NTFS Timestamps and Cover Your Tracks With Timestomp.exe</a> <small>There have been a million articles written on using timestomp.exe....</small></li>
</ol>]]></description>
		<wfw:commentRss>http://www.anti-forensics.com/disable-the-lastaccess-timestamp-in-windows-xp/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

