I understand NTFS file timestamp metadata includes the following:
This data is accessible in the Windows Explorer UI and elsewhere.
However, I believe the timestamp metadata includes
Apparently the Changed timestamp is when the file's master file table entry was changed (see https://app.pluralsight.com/library/courses/digital-forensics-file-systems-getting-started/).
How can I get access to this value?
According to my findings, the file Change Time field, also called MFT Timestamp, is not retrieved by using standard API functions, that only return the three standard times of created, modified and accessed.
To get the Change Time, you need to read the MFT entry of the file and analyze it yourself.
You will find an example PowerShell script that retrieves all MFT data
in Technet :
Get MFT (ChangeTime) Timestamp of a file (download link).
An explanation of this script by the author is found in the article :
Finding a File’s MFT Timestamp using PowerShell.