Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Need exact date external hard drive last connected to mac

Jun 28, 2009 7:16AM PDT

I have a Macbook, Mac OS X, Version 10.4.11

I am desperate to find out if there is a way to see a history by date of when the external hard drive was last connected to my mac. Please note that the last few times it was connected I merely looked at files on there - no modifications etc.

The external hard drive was a seagate 320GB.

Help!!!

Discussion is locked

- Collapse -
If the external is in HFS, the last access date.
Jun 28, 2009 7:25AM PDT
- Collapse -
HFS?
Jun 28, 2009 6:38PM PDT

How do I know if it is or isn't? Sorry.

- Collapse -
Let's try a search for that.
Jun 28, 2009 9:53PM PDT
- Collapse -
That Seagate drive
Jun 28, 2009 10:49PM PDT

came formatted as FAT(something) and, judging by the reaction of the OP to the HFS question, is still formatted as FAT(something)

JMO

P

- Collapse -
I can't tell if Apple OSes change the access date.
Jun 28, 2009 11:08PM PDT

FAT32 file systems do have an access date on the directory.

Sadly many are only able to use GUI software and must have a SINGLE CLICK TO GET MY ANSWER so I'm the wrong person to ask for such software since I use the command line on all machines it seems and author software.

Here's the grit on FAT32 access times -> http://www.google.com/search?hl=en&safe=off&q=fat32+File+Dates+and+Times

The first hit is some code that does this but I bet most volume explorers, finders and more can have a column with the Accessed date+time.

-> So here's a better search for the command line adverse:
http://www.google.com/search?hl=en&safe=off&q=Apple+Finder+sort+by+Date+Accessed+

Read
http://www.macosxhints.com/article.php?story=20020305201557183&query=men%25F9

- Collapse -
I appreciate your help but
Jun 29, 2009 1:24AM PDT

Sorry but this is all too complicated for me. I am not computer literate really at all and all the answers just confuse me even more.

I know that the drive was formatted for PC and MAC and was in this FAT32.

I have called some people who specialize in data recovery etc and know that it is something that can be retrieved as they said they could, but for that level of expertise I would have to pay in the region of

- Collapse -
Then let me.
Jun 29, 2009 1:30AM PDT
- Collapse -
Still confused
Jun 29, 2009 4:18AM PDT

Thank you so much but I just read it and am still perplexed.

What I need is a name and number of someone I can call in London so I can take my mac to them and pay them to do all this as it is all jargon to me.

I can't recall if I modified anything so I just have to assume that all I did was look at some folders without creating any new folders and/or documents.

My time to find this all out is decreasing at an alarming rate.

Thanks again.

- Collapse -
Any Apple story
Jun 29, 2009 5:24AM PDT

And that link could answer this question.

I supplied a lot of detail because recently many members seem to want the answers to be vetted. I'll end with this next paragraph.

-> The answer is NO! to if you can tell when the drive was last connected. The answer is YES! to if you can look at the access dates and see when a file was opened (accessed versus modified.)

Sorry if it seems technical but you did ask a technical question. And again, ANY Apple store, genius bar and that link should be abe to get it done.
Bob

- Collapse -
Is this enough?
Jun 29, 2009 3:42PM PDT

I went into "console" via spotlight then "show all" then "console" then "logs"
Like this I managed to see up to a certain date on the hard drive.

What I want to know is this: Is the last date showing the last day I accessed or modified files?

If it is modified only then I'll take your link to the apple store and ask them to look at the last link you gave me.

thanks.

- Collapse -
Sorry.
Jun 29, 2009 10:22PM PDT

But you are doing what amounts to forensics. Since you admit that file date and times confused you then your results are not reliable.

This is why I started with articles that answer if the ACCESS DATE was available. We also have the CREATION DATA and the MODIFIED DATE (and time) for each file entry.

Sorry but you need to get someone that understands that files have three date/time stamps and to look at those.

On top of all this, your tinkering with this drive may erase that answer. Think of it like a crime scene. You don't let anyone that isn't qualified onto the scene until you're done. In fact, the better forensic people won't even allow the ones that are qualified in!
Bob