Re: [sleuthkit-users] NBTempoW - timeline in Windows
Brought to you by:
carrier
From: Nanni B. <dig...@gm...> - 2017-03-06 18:54:12
|
Hi David, are you using NBTempoW 2.0? I guess yes...so, it's strange, because I and other people have tried on E01 and DD (raw) images and it works fine. Did you select a date range? Or did you use no parameters? Let me know :-) BTW you can try using tsk_gettimes.exe disk.E01 | mactime exe -d 0000-00-00 > timeline.csv you can find them in \bin directory, so you can check using only TSK tools without my GUI and let me know if it works. Thank you 2017-03-06 19:43 GMT+01:00 David Nides <dav...@gm...>: > just for kicks i tried running it quickly on a few images (e01) to see > what the output looks like and it produced empty excels each time. > > On Fri, Mar 3, 2017 at 4:28 AM, Nanni Bassetti <dig...@gm...> wrote: > >> Thanks to Derrick Karpo for warning of a problem in the file selection, I >> changed the system and now there is NBTempoW V. 2.0 ;-) >> >> 2017-03-02 22:04 GMT+01:00 Nanni Bassetti <dig...@gm...>: >> >>> NBTempoW is a forensic tool for making timelines from block devices >>> image files (raw, ewf,etc.). It uses TSK (The Sleuthkit) and it has been >>> developed with Lazarus V. 1.6.2 ( Delphi compatible cross-platform IDE for >>> Rapid Application Development). It runs only in Windows. If the device >>> image file is splitted, you can select just the first chunk. >>> https://github.com/nannib/NBTEMPOW >>> >>> Enjoy it! ;-) >>> >>> Dott. Nanni Bassetti >>> www.nannibassetti.com >>> >> >> >> >> -- >> Dott. Nanni Bassetti >> http://www.nannibassetti.com >> CAINE project manager - http://www.caine-live.net >> >> ------------------------------------------------------------ >> ------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, SlashDot.org! http://sdm.link/slashdot >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> >> > -- Dott. Nanni Bassetti http://www.nannibassetti.com CAINE project manager - http://www.caine-live.net |