/TimeStampAnalyzer_474-2135_Anderson-Fenwick-Kim

Tool to analyze and create a profile of given operating systems based on time stamp information. Will organize time data in readable format, provide time-stamp based OS comparison, and indicate probability of having been "Timestomped".

Primary LanguagePerlGNU General Public License v2.0GPL-2.0

TimeStampAnalyzer

Created by Matt Anderson, Scott Fenwick, Jeong Kim Rochester Institute of Technology, Spring 2014

<<<<<<< HEAD

What is it?

TimeStampAnalyzer is a forensic tool developed to analyze time information of files and folders within a Linux-based image. The tool is capable of scan and read all files and folders inside of a target image and sort out access time, modify time and change time of each file and folder. The time information is sorted and displayed in readable fashion so users can analyze which file is modified or created at which time frame.

The Latest Version

Details of the latest version can be found on the ForensicsTools repository of GitHub. https://github.com/forensictools

Documentation

Usage

License

GPLv2

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

A tool to analyze and create a profile of given operating systems based on time stamp information. This tool will eventually organize time data in readable format, provide time-stamp based OS comparison, and indicate probability of having been "Timestomped".

a07081b643c07b8d20682eed11cd6bb4b1b74813