Re: [sleuthkit-users] DateTime Info on each line of Timeline
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2005-02-08 12:58:07
|
On Feb 8, 2005, at 4:52 AM, Surago Jones wrote: > Yet another question, > > When creating timelines (from within Autopsy), is it possible to have > the DateTime information inserted on every line of the output, as when > using Grep to extract information for certain dates from a timeline it > would (I assume) exclude lines that do not have the date information on > them. If you use the '-d' flag, you get a comma delimited format that is better for sorting and excluding data. it has a time value for each line. brian |