D
D
Developer2020-04-17 08:40:56
Hard disks
Developer, 2020-04-17 08:40:56

Is it possible to find out if there was a fact of reading data from an external HDD?

There is an external HDD 2.5", Seagate 1TB (Backup Plus Portable Drive).
At some point in time, I left the screw unattended and someone could connect and read data from there.
Tell me, is it possible to somehow determine the fact that the disk is connected to the computer and reading data from there?
We are talking about ordinary users, not hackers.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
1
15432, 2020-04-17
@samodum

Yes, according to the SMART parameter 0C, the disk counts the number of on / off, if you know how much it was at the time you left it, then looking again, you can definitely say that the disk was connected to the computer:
%D0%A1%D0%BA%D1%80%D0%B8%D0%BD%D1%88%D0%

R
Ronald McDonald, 2020-04-17
@Zoominger

Yes, according to the properties of a file or directory, NTFS fixes the time of the last access.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question