Page 615 "Investigators can query or enable this setting via the fsutil command. For example, to query the setting, use this command: C:\>fsutil behavior query disablelastaccess"
The last access time is a feature in Windows that records the date and time when a file or folder was last accessed. To enable or disable this feature on a Windows 10 system, users can use the Reg.exe command to modify the Windows registry.
The following are the steps to disable the last access time on a Windows 10 system:
Open the Command Prompt with administrative privileges.
Type "reg add HKLM\SYSTEM\CurrentControlSet\Control\FileSystem /v NtfsDisableLastAccessUpdate /t REG_DWORD /d 1 /f" and press Enter.
Restart the system for the changes to take effect.
To enable the last access time on a Windows 10 system, users can use the following command: "reg add HKLM\SYSTEM\CurrentControlSet\Control\FileSystem /v NtfsDisableLastAccessUpdate /t REG_DWORD /d 0 /f".
C. fsutil. CHFI v10 pg. 418: "Windows has the ability to disable updating of the last access times on files...Investigators can query or enable this setting via the fsutil command."
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Chaoticda
Highly Voted 2 years, 7 months agomarymayhem
Most Recent 1 year agodiomaya
1 year, 2 months agoManzer
1 year, 4 months agojjweust
2 years, 3 months agoChaoticda
2 years, 7 months ago