I’m pretty new to Autopsy so I’m going through a bit of confusion on something I’m doing at the moment. I have to record these creation dates as accurately as possible and a bit confused by the files shown below.
This shows under the results tab in the metadata section of extracted content, this creation date says 2017 for a file I’m looking at.
This shows file details under the metadata file tab which is the same file and shows a creation date.
This is the same for most of the files i am looking at so just wondering which dates you would use?
Thanks for any help, much appreciated!