Basic WinZip Technique

Note: This is not the ideal technique, but it is free.  Better to use EnCase

Computers store the dates and times when last modified.

wpe2E.jpg (180690 bytes)

How to save the files with their dates and times intact

WinZip is a handy compression program, which can also be used to save the data, including the date and time stamps.

Select Start  wpe2D.jpg (1150 bytes)

Find or Search

Files or Folders

Name & Location
select the drive, usually C:

Date
between <date> and <date>

Find Now

Wait for the list to appear


Edit
Select All


To WinZip
Right Click

wpeB.jpg (114498 bytes)

WinZip - if installed

(if not use PKZIP from A: drive so as not to change disk)

Add to Zip

A:JOE-PC-C.Zip (or whatever the name is)

It may prompt you for several diskettes

Save the diskettes as evidence

 

wpe29.jpg (21767 bytes)

cyber law updates

CICorporation.US
ComputerInvestigators.Net
800-319-3190
202-829-4444
202-449-9500 Fax

Washington, DC

Return

.