Timeline Analysis with FTK 4.1 - Computer and Digital Forensics
Timeline Analysis with FTK 4.1 - Computer and Digital Forensics
Timeline Analysis with FTK 4.1 - Computer and Digital Forensics
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Patrick Leahy Center for <strong>Digital</strong> Investigation (LCDI)The CSV report can be opened <strong>with</strong> Microsoft Excel <strong>and</strong> formatted as desired [See Figure 6].Figure 6The HTML document can be opened <strong>with</strong> any web browser [See Figure 7].Figure 7It is important to note that both report types contain file names & attributes, such as MD5 <strong>and</strong> logicalsizes, along <strong>with</strong> created/modified/accessed dates for each entry found <strong>with</strong>in the <strong>FTK</strong> <strong>4.1</strong> case for theevidence.6