You should be able to see what the last time was that it was modified or added, You would probably have to get a 3rd party file monitoring tool for that. ======================= Try the afind utility in the <a href="http://www.foundstone.com/us/resources/proddesc/forensictoolkit.htm">Forensic toolkit</a> on Foundstone's website. Per the website: AFind is the only tool that lists files by their last access time without tampering the data the way that right-clicking on file properties in Explorer will. AFind allows you to search for access times between certain time frames, coordinating this with logon info provided from ntlast, you can to begin determine user activity even if file logging has not been enabled.

You should be able to see what the last time was that it was modified or added, You would probably have to get a 3rd party file monitoring tool for that. ======================= Try the afind utility in the <a href="http://www.foundstone.com/us/resources/proddesc/forensictoolkit.htm">Forensic toolkit</a> on Foundstone's website. Per the website: AFind is the only tool that lists files by their last access time without tampering the data the way that right-clicking on file properties in Explorer will. AFind allows you to search for access times between certain time frames, coordinating this with logon info provided from ntlast, you can to begin determine user activity even if file logging has not been enabled.