Re: [sleuthkit-users] Fwd: How to generate a CSV file with MAC times and MD5 from opensource??

[Brian C. <ca...@sl...>]

You can also use 'fls -m / -h' . '-m' for the mactime/body format and '-h'
to calculate hashes.



On Sun, Jun 24, 2018 at 9:46 AM, Greg Freemyer <gre...@gm...>
wrote:

> Thank you very much.
>
> fiwalk is exactly what I wanted.
>
> I've used it in the past, but I forgot about it.
>
> It would be good to get it added to:
> https://wiki.sleuthkit.org/index.php?title=TSK_Tool_Overview
>
> [assuming that page is supposed to be maintained. Otherwise killing
> the page might be good.]
>
> Thanks again,
> Greg
> --
> Greg Freemyer
> Advances are made by answering questions. Discoveries are made by
> questioning answers.
> — Bernard Haisch
>
>
> On Sat, Jun 23, 2018 at 9:23 PM, Barry Grundy <bg...@gm...> wrote:
> > Hi Greg,
> >
> > Is it possible that fiwalk (included with TSK) provides what you're
> looking
> > for?
> >
> > In simple terms:  fiwalk -Mm <image>
> >
> > Barry
> >
> >
> > On Sat, Jun 23, 2018 at 7:34 PM Greg Freemyer <gre...@gm...>
> > wrote:
> >>
> >> All,
> >>
> >> My X-Ways dongle is locked away at a customer site and I need to
> >> create a standard file inventory on a different matter.
> >>
> >> fls from sleuthkit can generate the path and MAC times in a parse-able
> >> format, but not the MD5 as far as I know.
> >>
> >> What can give me a combined output / CSV file?
> >>
> >> fyi: if a standard linux tool can do this, I can use ewfmount and a
> >> loopback mount to make the filesystem available for them.  I just also
> >> don't know of a standard linux tool that can do that.  Maybe some
> >> variation of find?
> >>
> >> Thanks
> >> Greg
> >> --
> >> Greg Freemyer
> >> Advances are made by answering questions. Discoveries are made by
> >> questioning answers.
> >> — Bernard Haisch
> >>
> >>
> >> ------------------------------------------------------------
> ------------------
> >> Check out the vibrant tech community on one of the world's most
> >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> >> _______________________________________________
> >> sleuthkit-users mailing list
> >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> >> http://www.sleuthkit.org
> >
> >
> >
> > --
> > ----
> > Barry Grundy
> > bg...@gm...
> > bg...@li...
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>