Retrieved Property - File Accessed

(imported topic written by RobertDiRosato)

My company is not license for SUA they are going to in a Few Months.

Until then how can I poll an executable to see when the last time it was accessed…

Does executable exist?

If yes what is the last date it was launched?

(Echo’s Back Date)

Thanks in advance for your assistance