General discussion

Locked

Hard disk

By F3rg13 ·
Is there anyway to interrogate a hard disk and determine when (Date/Time) it was first formatted?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Hard disk

Network forensics software tools do just this, which security investigators and police departments use.

Check out http://www.nwc.com/showArticle.jhtml?articleID=54201537

Collapse -

by hozcanhan In reply to Hard disk

yes this info is noted down and written at a predefined sector on the disk by some brands. look for a disk doctor software and dig in . Sometimes forums also post a list of these info . But under certain circumstances you can contact the producer through web and obtain that info by supplying S/N info and your biil ( with S/N on it ) . Info of old made disks are more likely to be easily accessible.

Collapse -

by OTL In reply to Hard disk

Open a command prompt (cmd.exe) and do a DIR in C: the . directory is the first time the HD was formated or OS loaded. Formatting should have occurred on that date !

Collapse -

by jmuanes In reply to Hard disk

Hello all.
Yes, there is a place where you can know the date when the hard disk was formated, not the first time but the last time that this happend. You will find this information at the MBR of your hard disk, and we can also suppose that if the MBR is same since the disk was first time formated... Is possibel to get the firt date, if not at least the last time that this happened.

Back to Security Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums