Hello...bit of a tricky one,

My SD card went missing out of my wallet, turning up two hours later. The person who claimed to have found it, has,I fear, accessed it and copied documents from it. To check, I put the card in my laptop, and a number of the Word files and one Jpeg were shown to be accessed at 00.00 on 29 July 2014 in the Properties tab.The SD card was sitting on my desk at that time, so that was impossible. However, I reset the time and date on my laptop, and it was possible to access a file with a falsified date and time stamp on the laptop, with little trouble. About 20 files were showing the aforementioned odd time and date stamp, so I am very suspicious. If what I suspect, has happened, can the identity of the computer that accessed the files be traced via the forensic file data or the SD card? Does the SD and or files in question even hold that sort of forensic data? Can meta data be just wrong???

Any help /suggestions hugely appreciated!

Thanks,
Lizzie

I don't think that that properties tab is very reliable. I have accessed or saved files on a certain date and when I look at that it shows something else.

I don't think you can check which computer has accessed it.

Why would someone want to copy your files and why would it matter?

Thanks,Treeoflife!

I live with someone who does not respect boundaries, and crosses the privacy line constantly, and their behaviour is of increasing concern. The files accessed (or shown to be accessed but not modified or any other thing altered) were my diary, sensitive documents about my health and a record of their unacceptable behaviour in the house. A couple of my academic files with ambiguous titles were also shown to be accessed..hence my suspicions.

Anyway, thanks again.

Wow, yeah ok, I can see why that would be an issue! Better start looking for a new place/housemate quick!