@hal_pomeranz Is there a way to merge the info you get from log2timeline -f win7 for example with fls?
2
@ShabbyCat76 "log2timeline -f mactime" eats "fls -m" output so you can convert it to CSV. But "-f win7" includes "mft", so don't need fls?
Nov 20, 2012 · 12:59 PM UTC