> For the complete documentation index, see [llms.txt](https://psmths.gitbook.io/windows-forensics/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://psmths.gitbook.io/windows-forensics/artifacts-by-activity/file-activity.md).

# File Activity

{% content-ref url="/pages/Ywpi93Ywi9miCUTepCc9" %}
[File Creation](/windows-forensics/artifacts-by-activity/file-activity/creation.md)
{% endcontent-ref %}

{% content-ref url="/pages/rmCTRMRp4lWv3ij2JpeD" %}
[File Deletion](/windows-forensics/artifacts-by-activity/file-activity/deletion.md)
{% endcontent-ref %}

{% content-ref url="/pages/cR8iRSw4xASw6iJFDAif" %}
[Last Modified](/windows-forensics/artifacts-by-activity/file-activity/last-modified.md)
{% endcontent-ref %}

{% content-ref url="/pages/efZNGZJl4GLKYlg9flem" %}
[File Origin](/windows-forensics/artifacts-by-activity/file-activity/origin.md)
{% endcontent-ref %}

{% content-ref url="/pages/nmru9qr1jF7O0ZoLkyQK" %}
[File Size](/windows-forensics/artifacts-by-activity/file-activity/size.md)
{% endcontent-ref %}

{% content-ref url="/pages/V3cDcDJogcr4slquHEzB" %}
[File Path](/windows-forensics/artifacts-by-activity/file-activity/file-path.md)
{% endcontent-ref %}

{% content-ref url="/pages/S13XZNNiwIfkltOIBXh0" %}
[File Hash](/windows-forensics/artifacts-by-activity/file-activity/file-hash.md)
{% endcontent-ref %}