Re: [sleuthkit-users] No mactime in Windows Version of Sleuthkit

[Simson G. <si...@ac...>]

On a related topic---

My goal remove the perl program and have sorter rewritten in either C++ or Java (we have had a lot of good luck with Java for forensics.) I'm looking for a student do do this, but will end up doing it myself if necessary.

Also, now that fiwalk can output in mactime format, there is no reason to run both mmls and then fls; just use fiwalk -m.

-Simson


On Nov 19, 2009, at 2:05 PM, Brian Carrier wrote:

> 
> On Sep 5, 2009, at 3:16 PM, RB wrote:
> 
>> On Sat, Sep 5, 2009 at 03:44, Mathew Brown<mat...@fa...>  
>> wrote:
>> 
>>> If we can find someone who has the Pro version (or even a normal
>>> licensed version), they I think they can compile it and then we can
>>> distribute it.
>> 
>> Perhaps I'm missing the point - what's the problem with using a
>> standard distribution of Perl, like Strawberry or ActiveState?  If
>> you're doing much in the way of forensics with OSS tools, you are
>> eventually going to run into both Perl and Python scripts that are
>> really better off just using a native interpreter than creating
>> one-shot nonportable binaries.
> 
> [cleaning up my inbox today and wrapping up some open and OLD threads]
> 
> I am not against using any of the Windows Perl distributions.  I just  
> have no experience with them. So, if someone could document what needs  
> to change, then I can make it happen.  For example, what needs to  
> happen for the script to find Perl.exe? Does the user have to edit the  
> first line of the file to point to their installation?  Do they need  
> to run it as "perl mactime"?
> 
> If someone can tell me what I need to do before releasing, what the  
> user needs to do when they install it, and if there is anything that  
> is unique about running it, then all of this can happen for the next  
> release.
> 
> thanks,
> brian
> 
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
> trial. Simplify your report design, integration and deployment - and focus on 
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org