Truxton file get accessed

This retrieves the last accessed date of the file. It corresponds to the LastAccess column of the File table.

Syntax

uint64_t truxton_file_get_accessed( uint64_t file_handle );

Parameters

file_handle

The handle created by the truxton_file_open_id or truxton_file_open_md5 call.

Return value

The last access date of the file in FILETIME ticks.

Sample

int print_id(uint64_t truxton)
{
   uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");

   if ( file != 0 )
   {
      return(0);
   }

   uint64_t ticks = truxton_file_get_accessed( file );

   if ( ticks == 0 )
   {
      printf( "Timestamp was not set\n" );
   }
}