Autopsy is a fabulous tool. Really. Thanks !
I’ve noticed the following for a long time in my computer (not only with 4.13.0) :
Autopsy doesn’t mention any dates/times for the files (dates are: 0000-00-00 00:00:00), except the files incorporated in zip-archives. As a result, the timeline add-in is not relevant.
But, if I build a zip-archive with all the files, Autopsy is able to mention the “modified time” (i.e. 2018-01-31 14:42:30 CET) of the files (only the modified time).
(unfortunately the zip files inside the big zip-archives are not automatically investigated by Autopsy ; and it’s not possible to analyze the various dates of the files)
I run Autopsy for Windows (Win10Pro), with a French-language environment (Windows date format: JJ-MM-AAAA). I tried to format the Windows date to AAAA-MM-JJ: it is without any effect.
Any thoughts ?