// ntifs.h

typedef struct _FILE_TIMESTAMPS {
  LARGE_INTEGER CreationTime;
  LARGE_INTEGER LastAccessTime;
  LARGE_INTEGER LastWriteTime;
  LARGE_INTEGER ChangeTime;
} FILE_TIMESTAMPS, *PFILE_TIMESTAMPS;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-_file_timestamps)

_FILE_TIMESTAMPS structure

Description

The FILE_TIMESTAMPS structure specifies the last recorded instance of specific actions on a file.

Members

`CreationTime`

Specifies the creation time of a file.

`LastAccessTime`

Specifies the last time a file was accessed.

`LastWriteTime`

Specifies the last time a file was written to.

`ChangeTime`

Specifies the last time a file was changed or modified.

FILE_TIMESTAMPS - NtDoc