[sleuthkit-users] Suggestion for activity time line
Brought to you by:
carrier
|
From: Keith R W. <kw...@be...> - 2006-05-07 19:47:15
|
When creating the time line for file activity, place the deleted indicator, as well as the DOS alias file name in their own separate column. This would make those elements stand out more when loaded into a spread sheet. |