Re: [sleuthkit-users] ntfs file ownership

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Aug 2, 2004, at 7:29 AM, Aaron Peterson wrote:

> so is there a way to see who owns files on an ntfs filesystem through
> the use of sleuthkit tools?

The ownerid of the file is given in the 'istat' output, but it is not 
tied to a full user name.


brian


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBDlT2OK1gLsdFTIsRAp5BAJ4gvFkdgrXioq4vObYpGh7aADMsyQCfQzld
8TE1SAnB85hqZS1XJ7c3yiY=
=+85X
-----END PGP SIGNATURE-----