Disable timestamp for last access to a file – Anti-forensics

fsutil – Performs tasks that are related to file allocation table (FAT) and NTFS file systems, such as managing reparse points, managing sparse files, or dismounting a volume. If it is used without parameters, fsutil displays a list of supported subcommands.

fsutil behavior – queries or sets NTFS volume behavior.

> Run cmd as administrator
> Type:

fsutil behavior set disablelastaccess 1

> Hit enter

%d bloggers like this: