What type of dates and times the file system can support, which may include:
Access date
This is the date the file was last accessed. An access can be a move, an open, or any other simple access. It can also be tripped by Anti-virus scanners, or Windows system processes. Therefore, caution has to be used when stating a “file was last accessed by user XXX” if there is only the “File Access” date in NTFS to work from.
Backed-up date
The date and time when the file was last backed up.
Changed date
The date and time related attributes were modified. This may include ACLs and the file/directory name.
Creation date
This is the date the file was “created” on the volume. This does not change when working normally with a file, e.g. opening, closing, saving, or modifying the file.
Modified date
This date as shown by Windows there has been a change to the file itself. E.g. if a notepad document has more data added to it, this would trip the date it was modified.