Tag Archives: win32API

Finding a File’s MFT Timestamp using PowerShell

Posted on March 3, 2013 by Boe Prox

During my last couple of articles dealing with writing and reading files without updating their LastAccess and LastWrite timestamps which has seen a bit of popularity from folks.  While these methods work great for the casual onlooker, digging down deeper … Continue reading →

Posted in powershell | Tagged , , , , , | 2 Comments

Read File Without Updating LastAccess TimeStamp using PowerShell

Posted on February 18, 2013 by Boe Prox

In my last article I showed you how to write to a file covertly without updating the LastWrite and LastAccess time and even avoid being tripped by the FileSystemWatcher event.  This is a follow-up to that article that uses many … Continue reading →

Posted in powershell, scripts | Tagged , , , | Leave a comment

Write to an Existing File Without Updating LastWriteTime or LastAccessTimestamps Using PowerShell

Posted on February 14, 2013 by Boe Prox

This little trick was something I stumbled upon while attempting to help solve an issue with a file scan that was about to take place. We wanted to know the last time a file was accessed and build out a … Continue reading →

Posted in powershell, scripts | Tagged , , , , | 2 Comments

Converting Bytes To The Largest Type Using P/Invoke

Posted on August 23, 2012 by Boe Prox

A good while back I wrote an article (one of my first) that showed a way to convert the raw bytes of a file or anything for that matter into the upper most value. For instance, if you had 100240 … Continue reading →

Posted in powershell, scripts | Tagged , , , , | 1 Comment