when analyzing storage using for SharePoint server system drive C, I used the lastwritetime and creationtime field of windows file system.
I don't think the windows file system has timestamp associated with the disk block allocated to a file. But I had thought there was such kind of fields with SharePoint cobalt related table. However, I don't find these either. And I don't know any convenient way to get this kind of information (when a row was inserted or updated) from SQL Server. If thing such as RBS is used, we may get this from file system metadata for RBS.
But is it cost much just add lastwritetime and creationtime for cobalt related tables?
What about SharePoint 2016 or 2019? I don't have an evaluation on hand.