mactime

E987501 UNEXPLORED

mactime is a forensic analysis tool used to create timelines of file activity based on MAC (Modified, Accessed, Changed) timestamps on a filesystem.

All labels observed (1)

Label Occurrences
mactime canonical 1

How this entity was disambiguated

Referenced by (1)

Full triples — surface form annotated when it differs from this entity's canonical label.

The Coroner’s Toolkit (TCT) includesTool mactime
subject surface form: The Coroner’s Toolkit