Hello there, don't know if this is the right place to ask the question, but I hope I can get some help.

My question is not one of data recovery or repair, but rather, of identifying information regarding a file. I was wondering if its possible to analyse a hard disk to prove, for a specific file, when it was created and when it was last modified. I know that information can be seen simply at the file properties of a file in the OS, but I've been told its possible to affect that simply by changing the system clock.

Is it possible through any software or hardware analysis, to track how a file was changed through time on the hard disk, and provide conclusive proof of its creation and last modification dates and times? I very urgently need to find this information regarding a number of files in my system. I have the files, which have not been deleted, and I have neither moved them or changed them, and need to prove the date they were last modified.

I'd greatly appreciate any help you can give me.

Assuming NTFS, use runtimes disk explorer for NTFS. View as file entry details. It will translate all of attributes of the files file record and you can see all of that info. You can also change your view settings of windows explorer to display all of that information also.