Edit

FILE_TIMESTAMPS structure (ntifs.h)

  • Article

The FILE_TIMESTAMPS structure specifies the last recorded instance of specific actions on a file.

Syntax

typedef struct _FILE_TIMESTAMPS {
  LARGE_INTEGER CreationTime;
  LARGE_INTEGER LastAccessTime;
  LARGE_INTEGER LastWriteTime;
  LARGE_INTEGER ChangeTime;
} FILE_TIMESTAMPS, *PFILE_TIMESTAMPS;

Members

CreationTime

Specifies the creation time of a file.

LastAccessTime

Specifies the last time a file was accessed.

LastWriteTime

Specifies the last time a file was written to.

ChangeTime

Specifies the last time a file was changed or modified.

Requirements

Requirement Value
Header ntifs.h (include Ntifs.h, Fltkernel.h)

See also

ATOMIC_CREATE_ECP_CONTEXT