Re: [sleuthkit-users] NBTempoW - timeline in Windows
Brought to you by:
carrier
From: David N. <dav...@gm...> - 2017-03-06 18:43:34
|
just for kicks i tried running it quickly on a few images (e01) to see what the output looks like and it produced empty excels each time. On Fri, Mar 3, 2017 at 4:28 AM, Nanni Bassetti <dig...@gm...> wrote: > Thanks to Derrick Karpo for warning of a problem in the file selection, I > changed the system and now there is NBTempoW V. 2.0 ;-) > > 2017-03-02 22:04 GMT+01:00 Nanni Bassetti <dig...@gm...>: > >> NBTempoW is a forensic tool for making timelines from block devices image >> files (raw, ewf,etc.). It uses TSK (The Sleuthkit) and it has been >> developed with Lazarus V. 1.6.2 ( Delphi compatible cross-platform IDE for >> Rapid Application Development). It runs only in Windows. If the device >> image file is splitted, you can select just the first chunk. >> https://github.com/nannib/NBTEMPOW >> >> Enjoy it! ;-) >> >> Dott. Nanni Bassetti >> www.nannibassetti.com >> > > > > -- > Dott. Nanni Bassetti > http://www.nannibassetti.com > CAINE project manager - http://www.caine-live.net > > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, SlashDot.org! http://sdm.link/slashdot > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |