Windows Commands

Requirements

Administrator account
Windows XP

Command Summary

Login as Administrator
Open a command prompt
Enter the command: fsutil behavior set disablelastaccess 1
Restart computer

Purpose
I’ll come right out and say that this is definitely not a strong anti-forensic technique but it can be helpful. Most forensic examiners already know they can’t rely heavily on lastaccess timestamps. One major reason is that anti-malware and anti-virus [...]