Solved

The Sleuth Kit MACtimes for Windows?

Posted on 2010-11-08
4
673 Views
Last Modified: 2013-12-17
Hi there! I am new to the sleuth kit for forensics purposes. I have recently downloaded the sleuth kit for windows and have read through the wiki page for the kit.

However I could not find the MACtimes.pl script to translate the .fls files to a readable timeline format. Could someone please tell me how to get and run the MACtimes script for windows?

Is the perl script included with the downlaoded package? If so please tell me which program it is. Are there any other ways to generate MACtimes too? Thanks!
0
Comment
Question by:VMthinker
  • 3
4 Comments
 
LVL 8

Expert Comment

by:guvera
ID: 34090962
Hi,
 
  Better to find the below link in the experts exchange

http://www.experts-exchange.com/Programming/Languages/C/Q_26591489.html

It may same as your scenario. I am not sure that this is right. But it may be helpful.Please check it
0
 
LVL 2

Author Comment

by:VMthinker
ID: 34108981
The link you showed me was also created by me....
0
 
LVL 2

Accepted Solution

by:
VMthinker earned 0 total points
ID: 34108989
The solution to the question is simple actually just found out recently...
1) Download Sleuth kit from website (windows)
2) Locate MACtimes.pl from zip file.
3) Install perl on computer.
4) Run the command on cmd "perl mactime.pl......."
0
 
LVL 2

Author Closing Comment

by:VMthinker
ID: 34134757
Mislooked at the Linux and windows version.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

For those of you who don't follow the news, or just happen to live under rocks, Microsoft Research released a beta SDK (http://www.microsoft.com/en-us/download/details.aspx?id=27876) for the Xbox 360 Kinect. If you don't know what a Kinect is (http:…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now