https://wiki.sleuthkit.org/index.php?title=Tsk_comparedir&feed=atom&action=historyTsk comparedir - Revision history2024-03-29T05:29:52ZRevision history for this page on the wikiMediaWiki 1.22.6https://wiki.sleuthkit.org/index.php?title=Tsk_comparedir&diff=507&oldid=prevCarrier: Created page with "Back to Help Documents tsk_comparedir will compare a local directory with an image or raw device. This is useful for detecting when a rootkit is hiding a file from the loca..."2010-10-28T02:23:32Z<p>Created page with "Back to <a href="/index.php?title=Help_Documents" title="Help Documents">Help Documents</a> tsk_comparedir will compare a local directory with an image or raw device. This is useful for detecting when a rootkit is hiding a file from the loca..."</p>
<p><b>New page</b></p><div>Back to [[Help Documents]]<br />
<br />
tsk_comparedir will compare a local directory with an image or raw device. This is useful for detecting when a rootkit is hiding a file from the local directory hierarchy. TSK will be able to see the hidden files by parsing the raw content from the raw device. This can also be used for testing. <br />
<br />
* [http://www.sleuthkit.org/sleuthkit/man/tsk_comparedir.html Automatically Updated man Page]</div>Carrier