How to see (Command line) when a file has been created/copied

3

I need to find a way to get the date of a file that has been copied from the network on a given workstation. I see some info when I right-click the file but I know that it's not 3 months ago (The file has been created over the network on that time)

I am using Windows XP Pro and that file has been pushed from Zenworks AOT.

r0ca

Posted 2011-06-27T15:04:57.487

Reputation: 5 474

Answers

1

I would play around with dir /t:[C|A|W] and figure out which one changes when the file is copied over the network.

For example, on my machine the Access time /t:A changes to when the file was copied, but the other two stay the same.

Tarek Fadel

Posted 2011-06-27T15:04:57.487

Reputation: 435

Ahh it's sad, I don't see the info either... Thanks a lot! – r0ca – 2011-06-27T15:55:29.770

0

You are not going to get that data from a normal command prompt. You can try either of the following:

Non-command line since it is easier. Right-click the file, and go to properties>details. If the information you want is not there, unless you have some additional file monitoring system in place.

From a command line, you can use wmic. For more information, see the following document.

http://www.winplat.net/post/How-to-check-file-properties-through-WMI-command-line.aspx

KCotreau

Posted 2011-06-27T15:04:57.487

Reputation: 24 985

Looks like a great command I just discovered. Unfortunately, it did not display the requested info. – r0ca – 2011-06-27T15:56:09.833

@r0ca It almost certainly does not exist. I was just showing you how to get whatever is there. I have never heard of any such metadata. – KCotreau – 2011-06-27T16:04:33.293