Mactime

From SleuthKitWiki

Revision as of 19:45, 11 September 2008 by Carrier (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to: navigation, search

Back to Help Documents

mactime creates an ASCII time line of file activity based on the output of the fls or ils tools. It can be used to detect anomalous behavior.

A description of the mactime output
Automatically Updated man Page

Retrieved from "https://wiki.sleuthkit.org/index.php?title=Mactime&oldid=206"

Navigation menu