DFIRHub

FreeFileSync

FreeFileSync

  • Apps
  • 1 path
  • Per-user data
  • Version 1
  • Andrew Rathbun

Paths on disk

1 path

Paths use Windows environment variable syntax

Notes

FreeFileSync is an awesome program for making copies of the logical contents of a drive, volume, folder, etc.

By default, the logs for each use of this program is stored in an HTML file at the above location.

HTML logs are plain text readable and easy to interpret.

You will find that each file copied is timestamped. Please note this time is recorded as the system time at the time of file copy.

Full file paths are provided in these logs so if files were deleted at the time of seizure of these logs, this will help prove the files existed at a certain date/time.