Difference between revisions of "Mactime"

From SleuthKitWiki
Jump to: navigation, search
(Added output link.)
m (formatting.)
Line 2: Line 2:
  
 
mactime creates an ASCII time line of file activity based on the output of the fls or ils tools. It can be used to detect anomalous behavior.  
 
mactime creates an ASCII time line of file activity based on the output of the fls or ils tools. It can be used to detect anomalous behavior.  
 
  
 
* A description of the [[mactime output]]   
 
* A description of the [[mactime output]]   
 
 
 
* [http://www.sleuthkit.org/sleuthkit/man/mactime.html Automatically Updated man Page]
 
* [http://www.sleuthkit.org/sleuthkit/man/mactime.html Automatically Updated man Page]

Revision as of 19:45, 11 September 2008

Back to Help Documents

mactime creates an ASCII time line of file activity based on the output of the fls or ils tools. It can be used to detect anomalous behavior.