FTimes is a system baselining and evidence collection tool. The primary purpose of ftimes is to gather and/or develop topographical information and attributes about specified directories and files in a manner conducive to intrusion and forensic analysis.
Fast and complete application for mapping hard drives. Highly recommended. Just a note to the authors, I've created 2 Windows GUI applications that use ftimes: code.google.com/p/file-activity-timeline/ and code.google.com/p/shadow-map/