Hello. I am using Autopsy 4.15.0 to analyze an old hard drive from 2002. I noticed that information generated from the index.dat file sometimes has a different created/modified times than associated files in the cache. Which timestamp is correct? How can I get the most accurate time created/modified info?
Thank you for your assistance.