±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 32893
New Yesterday: 9 Visitors: 198

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

.Trashes and Resource Fork

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

.Trashes and Resource Fork

Post Posted: Tue Sep 10, 2013 1:24 pm

Hi all,

I am not an Apple expert so was wondering if I could tap your brains?

I have a document on a USB which has a created date of (example dates) 1 Jan 13.

I have a resource fork '._' for this document dated 1 Feb 13.

I have .trashes, .spotlight etc created date 1 Mar 13.

How can I have .trashes etc created after an Apple created resource fork was created as I thought .trashes was created when first inserted? A little confused, but sure there is an explanation?

If it helps, the document may have been a 'doc' file taht was subsequently saved as a 'docx' file at some point...

Many thanks

Shep  

shep47
Senior Member
 
 

Page 1 of 1