Check timestamp manipulation based on TSK body file
Project description
Description
Check timestamp manipulation based on TSK body file. The result list all directories and files within the TSK body file, where the creation time comes after other timestamps. All timestamps uses UTC.
Installation
pip install stampchecker
Usage
From command line:
python -m stampchecker add --path PATH
Option | Short | Type | Default | Description |
---|---|---|---|---|
--path | -p | String | - | Path to TSK body file |
Example
python -m stampchecker -p tsk-body.txt
################################################################################
Stamp Checker by 5f0
Check timestamp manipulation based on TSK body file
Current working directory: path/to/stampchecker
Investigated file: ./tsk-body.txt
Datetime: 01/01/1970 10:11:12
################################################################################
---> /dir/01.jpg
-------------------
Creation Time: 2012-12-27 14:23:14+00:00 - 1356618194
-------------------
Modification Time: 2012-05-20 18:33:16+00:00 - 1337538796
Changed Time: 2012-12-27 14:14:09+00:00 - 1356617649
-------------------
Execution Time: 0.000259 sec
License
MIT
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
stampchecker-1.0.0.tar.gz
(3.4 kB
view hashes)
Built Distribution
Close
Hashes for stampchecker-1.0.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | e8d21a78a4ddbc8acf1b68d59b7cc95f93c268edb9bf94a473da0f2e11133381 |
|
MD5 | 139f2d700d7591f4649b3d8a74ababc1 |
|
BLAKE2b-256 | 4f8f520ab2e28ccaa18142592a222c02def5b38d7dc51b5604a4a5b5c0264ec6 |