Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Has my external hard drive had confidential files opened or deleted


  • Please log in to reply
3 replies to this topic

#1 donnie12

donnie12

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:44 PM

Posted 26 February 2013 - 01:37 AM

I have a Western Digital 1TB My Book Essential and I need to know if any confidential files have been opened or deleted. Also what activity it has had on it over the past few months. Thanks much.



BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,460 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:44 PM

Posted 27 February 2013 - 10:40 AM

What operating system are you using?

 

Have you given any thought about using encryption software?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 donnie12

donnie12
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:04:44 PM

Posted 27 February 2013 - 09:08 PM

I'm using Windows 7.  I'm not familiar with using encryption software.



#4 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:04:44 PM

Posted 27 February 2013 - 10:54 PM

If you open the drive in Windows Explorer, you can choose VIEW | DETAILS.

Then right click the top of one of the columns like NAME

Select MORE

Then check the box for DATE ACCESSED and that will add an extra column where you can see the last time each file was accessed.

 

For deleted files, you can use something like NTFSWalker which is free and will show you which files were recently deleted but still have entries in the MFT (I'm assuming that the file system on the disk is NTFS) but it is a tedious task and does not let you sort by deleted files. Another free option is Recuva which can find deleted files on the drive.

 

James






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users