[John Jamieson]

I don't believe the file was created (that is downloaded on 2/4) just last accessed (looked at). I don't think showing the property list will change the last access, but it might. I'll check.

[hoosiermama]

P>S> Could it also tell is she had been exposed to pot. Can't hair strands be used?

[John Jamieson]

Just tried it. Looking at the property list or looking at the image, both change the last access date and time. Interesting. My directory shows thumbnails of the images (WINXP) so it has to open each image to make the thumbnails, changing all of the images access dates in that directory. It makes it look like the user looked at dozens of images, when all he did was look at the directory.

Still, someone was on that computer on 2/4 about 4:45pm, other than Westerfield, and they have only been looking at his directories.