Re: [sleuthkit-users] body file + checksum - any tools?
Brought to you by:
carrier
From: RB <ao...@gm...> - 2014-03-13 20:10:45
|
I guess tsk_loaddb would be the appropriate answer here, but is there anything that, say, would do dfxml output of all 8 timestamps from NTFS? On Thu, Mar 13, 2014 at 1:52 PM, RB <ao...@gm...> wrote: > Does anyone know of a tool that actually fills out the checksum field > of the current body file format? I'm trying to find more efficient > ways to snag the checksums than mounting the partition and runnning > md5deep over it. Thoughts? |