Jan. 20, 2023, 9:07 p.m. | /u/Plastic-Mud-868

Computer Forensics www.reddit.com

Greetings all,

I’m attempting to create a timeline of events in a case and had a question regarding jump list files. Is it possible for the OS (Windows 10) to modify Last Accessed date/time of a jump list file without user input? It appears that Windows Explorer accessed a local folder at the following location - “C:\ProgramData\[App Name]\…” via jump list and I want to confirm if it was user or OS generated. It should be noted the application appears …

app case computerforensics events explorer file files folder generated input list lists local location name question timeline windows windows 10 windows explorer

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Security Solution Architect

@ Civica | London, England, United Kingdom

Information Security Officer (80-100%)

@ SIX Group | Zurich, CH

Cloud Information Systems Security Engineer

@ Analytic Solutions Group | Chantilly, Virginia, United States

SRE Engineer & Security Software Administrator

@ Talan | Mexico City, Spain