Search results
From SleuthKitWiki
- ...now Your Enemy 2nd Edition]. The Honeynet Project (Brian Carrier wrote the UNIX Forensics chapter and Rob Lee wrote the Windows Forensics chapter). 2004. A2 KB (262 words) - 09:18, 16 October 2008
- ... other digital investigation tools. Together, they can analyze Windows and UNIX disks and file systems (NTFS, FAT, UFS1/2, Ext2/3, etc.).961 B (149 words) - 06:37, 21 August 2015
- ...es what each column means. This program was originally created to analyze Unix file systems and therefore some of the columns have little meaning when ana Date/Time Size Activity Unix User Group inode File Name4 KB (534 words) - 04:53, 8 October 2016
- Most entries will be 'r' and 'd'. The others are Unix-focused.4 KB (640 words) - 09:10, 13 January 2014
- The techniques used here apply to both UNIX and Windows file systems. Next, use the UNIX strings(1) utility to extract all of the ASCII strings in the file of unall10 KB (1,543 words) - 12:04, 7 March 2015
- Some of the arguments for mactime help to make the output more readable. On a Unix system, the User and Group IDs can be mapped to actual names by using the '2 KB (305 words) - 09:41, 13 August 2010
- The times are reported in UNIX time format. Lines that start with '#' are ignored and treated as comments.1 KB (214 words) - 06:30, 27 April 2009
- only for UNIX file systems. The FAT file system and UNIX file used in many UNIX implementations. Each sector in the data area4 KB (775 words) - 09:52, 4 February 2009
- from the UNIX file systems that the original [[TCT]] was designed for. ways as any UNIX image, including:4 KB (657 words) - 11:52, 8 February 2009
- run on both Windows and Unix systems. The biggest change, and the focus Unicode characters can be stored in multiple formats. Unix systems2 KB (370 words) - 18:32, 26 October 2008
- Each MFT entry is given a number (similar to inode numbers in UNIX). is different than what is usually seen with UNIX and FAT file5 KB (894 words) - 12:52, 7 March 2015
- [[Category:Unix]]13 KB (1,977 words) - 15:12, 21 May 2013
- * ''mode'' - Unix-style permissions (as TSK_FS_META_MODE_ENUM)10 KB (1,740 words) - 09:36, 20 February 2014
- * ''mode'' - Unix-style permissions (as [http://www.sleuthkit.org/sleuthkit/docs/jni-docs/enu11 KB (2,005 words) - 09:49, 27 April 2015
- ...euth Kit]] (TSK). Like [[FAT]], exFAT has significant differences with the UNIX file system TSK was originally designed to support, and this document will5 KB (824 words) - 13:39, 3 June 2014
- * ''mode'' - Unix-style permissions (as [http://www.sleuthkit.org/sleuthkit/docs/jni-docs/enu * date_time - Date associated with relationship (Unix epoch).17 KB (2,902 words) - 07:37, 19 July 2019
- * ''mode'' - Unix-style permissions (as [http://www.sleuthkit.org/sleuthkit/docs/jni-docs/enu14 KB (2,426 words) - 18:28, 21 April 2017
