Re: [sleuthkit-users] body file + checksum - any tools?
Brought to you by:
carrier
From: RB <ao...@gm...> - 2014-03-13 22:48:34
|
On Thu, Mar 13, 2014 at 4:10 PM, Brian Carrier <ca...@sl...> wrote: > tsk_loaddb is fixed in the develop branch. Excellent, thank you - tsk_gettimes -m is sufficing for what I need right now. I know we discussed the 8-timestamp thing a while ago (Simson included), and the initial decision was to put that out as more columns. Has any progress been made on that? I'd love to see either (or both) TSK and fiwalk produce that kind of data with a runtime flag. |