FILE_TIMESTAMPS structure (ntifs.h)
The FILE_TIMESTAMPS structure specifies the last recorded instance of specific actions on a file.
Syntax
typedef struct _FILE_TIMESTAMPS {
LARGE_INTEGER CreationTime;
LARGE_INTEGER LastAccessTime;
LARGE_INTEGER LastWriteTime;
LARGE_INTEGER ChangeTime;
} FILE_TIMESTAMPS, *PFILE_TIMESTAMPS;
Members
CreationTime
Specifies the creation time of a file.
LastAccessTime
Specifies the last time a file was accessed.
LastWriteTime
Specifies the last time a file was written to.
ChangeTime
Specifies the last time a file was changed or modified.
Requirements
Requirement | Value |
---|---|
Header | ntifs.h (include Ntifs.h, Fltkernel.h) |