Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

The Sleuth Kit MACtimes for Windows?

Posted on 2010-11-08
4
Medium Priority
?
693 Views
Last Modified: 2013-12-17
Hi there! I am new to the sleuth kit for forensics purposes. I have recently downloaded the sleuth kit for windows and have read through the wiki page for the kit.

However I could not find the MACtimes.pl script to translate the .fls files to a readable timeline format. Could someone please tell me how to get and run the MACtimes script for windows?

Is the perl script included with the downlaoded package? If so please tell me which program it is. Are there any other ways to generate MACtimes too? Thanks!
0
Comment
Question by:VMthinker
  • 3
4 Comments
 
LVL 8

Expert Comment

by:guvera
ID: 34090962
Hi,
 
  Better to find the below link in the experts exchange

http://www.experts-exchange.com/Programming/Languages/C/Q_26591489.html

It may same as your scenario. I am not sure that this is right. But it may be helpful.Please check it
0
 
LVL 2

Author Comment

by:VMthinker
ID: 34108981
The link you showed me was also created by me....
0
 
LVL 2

Accepted Solution

by:
VMthinker earned 0 total points
ID: 34108989
The solution to the question is simple actually just found out recently...
1) Download Sleuth kit from website (windows)
2) Locate MACtimes.pl from zip file.
3) Install perl on computer.
4) Run the command on cmd "perl mactime.pl......."
0
 
LVL 2

Author Closing Comment

by:VMthinker
ID: 34134757
Mislooked at the Linux and windows version.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A long time ago (May 2011), I have written an article showing you how to create a DLL using Visual Studio 2005 to be hosted in SQL Server 2005. That was valid at that time and it is still valid if you are still using these versions. You can still re…
It was really hard time for me to get the understanding of Delegates in C#. I went through many websites and articles but I found them very clumsy. After going through those sites, I noted down the points in a easy way so here I am sharing that unde…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question