FLSmac

User friendly command line interface for image timeline analysis

Downloads: 0 This Week

Last Update: 2013-05-29

Get an email when there's a new version of FLSmac

FLSmac provides a simple to use interface written in perl to integrate the most commonly
used FLS and mactime commands to create a forensics timeline from a disk image.
In addition, it shows you the command as it is being built so that you can
verify its accuracy AND learn how the commands were assembled.

Installation
Simply un-tar the folder to the location of your choosing (ex: tar -xvf flsmac.tar).

Usage
./flsmac.pl

Optional Parameters
-h Displays help file
[image_name] Send the file name as input image

Requirements
SleuthKit and perl must be installed
SleuthKit is available from:
http://www.sleuthkit.org/sleuthkit/download.php

Limitations
- Has to create a temporary file to catch the output of FLS at
/tmp/flsmactmp which is deleted after mactime execution.
- Only includes what the author of flsmac deemed the
"most commonly" used commands - although more can be easily added.

contact = bxr9458 at rit dot edu

Project Samples

FLSmac interface

Project Activity

See All Activity >

Follow FLSmac

FLSmac Web Site

Other Useful Business Software

Demo Series - Small Business Backup By Veeam Icon

Demo Series - Small Business Backup By Veeam

Learn how to protect your Microsoft 365 data, with simple, actionable tips today.

Watch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.

Watch Demo Series

Rate This Project

Login To Rate This Project

User Reviews

Be the first to post a review of FLSmac!

Additional Project Details

Registered

2013-05-03

Report inappropriate content

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Start Free

Recommended Projects

IC Login
IC Login is used to automate the login to com hem Internet Cable and Telia ADLS, both FLS and ELAS (login methods, ignore if you don't recognize). It's a Windows program that can also run as a service.
Cryptography Playground
The best cryptography playground available
iRecover - File Recovery Tool
iRecover was developed to aid forensics investigators by combining other commonly used command-line forensics tools into a simple graphical user interface. iRecover provides a GUI interface using the Perl/Tk programming library for forensics examiners to use when retrieving deleted files from an image/ file partition under forensic investigation. Investigators can use this tool to selectively retrieve only certain kinds of files (text, images, video, audio, documents, etc.) for a quick overview of information or for recovery using the "icat" Sleuth Kit tool to actually go into the image and select the files of interest to display.
Initial Ubuntu Tasks
A quick script that removes mono, installs, restricted extras, k3b, fonts, provides 5.1 surround sound. Just extract it ( tar xvf ubuntuTaks.sh.tar.gz ) make sure it's executable ( chmod +x ubuntuTasks.sh ) and execute it using ./ubuntuTasks.sh
mac-robber
mac-robber is a digital forensics and incident response tool that can be used with The Sleuth Kit to create a timeline of file activity for mounted file systems.