Index of /ports_security/mac-robber
Name Last modified Size
Parent Directory -
Makefile 25-Oct-2009 20:13 549
distinfo 24-Jan-2006 04:03 201
pkg-descr 25-May-2004 19:35 516
pkg-plist 17-Feb-2003 12:19 108
mac-robber is a Forensics & Incident Response tool used to collect
the Modified, Access, and Change (MAC) times from allocated files.
It recursively reads MAC times of files and directories and prints
them in 'time machine' format to STDOUT. This format is the same
that the mactime tool from The Coroners Toolkit (TCT) reads.
mac-robber is based on the grave-robber tool from The Coroners
Toolkit (TCT) when using the '-m' flag, except it does not require
Perl!
WWW: http://www.sleuthkit.org/mac-robber/desc.php