How to find when a file was dropped

Hello,

Is there a way to find out when was a file was dropped on a system?

We have a situation, where a malware file is quarantined by SEP on many systems.

However, there are some systems, where, we know the malware exists in a given location [which is not excluded from scan], but still, it is not actioned by SEP.

Maybe, the file was dropped after the last scheduled full scan. So, when I manually access the location, Auto-Protect quarantines it.

So, I am thinking that the file could have been dropped after the last schedueld scan completed running. If that is the case, shouldn't Auto-Protect pick it up when it was dropped?

Please assist.

Thanks,

Jimmy

=-=-=