4rchive
Home
Feed
Search
Thread 1533616 - /wsr/
[Archived: 129 hours ago]
← Boards
← Back to /wsr/
Open Gallery
Anonymous
7/15/2025, 5:53:02 PM No.1533616
USB
md5: 2f3d68d16939c29687d9555c55e37b0b
🔍
I have a thumb drive and think someone else might have accessed it. How can I check the metadata to see when it was last accessed?
Replies:
>>1533619
>>1533647
>>1533775
Anonymous
7/15/2025, 7:13:01 PM No.1533619
>>1533616 (OP)
That depends on the file system, but there should be an "Accessed" field in the file properties.
It might not have been updated though, if the file system was mounted with noatime.
Replies:
>>1533620
Anonymous
7/15/2025, 7:19:27 PM No.1533620
>>1533619
Yeah, the accessed just gives me today, when I plug it in, it's accessed. I'm looking for itemized access.
Anonymous
7/15/2025, 10:16:37 PM No.1533647
>>1533616 (OP)
Here's a powershell script for that:
# Define the path to the folder
$folderPath = "C:\Path\To\Your\Folder"
# Get all files recursively and select required properties
Get-ChildItem -Path $folderPath -Recurse -File |
Select-Object FullName, LastAccessTime |
Sort-Object LastAccessTime -Descending |
Format-Table -AutoSize
Anonymous
7/16/2025, 10:19:42 PM No.1533775
>>1533616 (OP)
Encrypt your stuff next time
Close ✕
❮
❯