I know that one can see the modification, access, and creation date of a file on Windows. And that the creation date, as well as other dates, can be modified at will. I just wonder if it is possible to forensically determine who created a file?
For example, is it possible to find out which DESKTOP_NAME
created a .txt or a .cpp file even if it was transferred from other PCs?