BSD Ports

security/mac-robber 1.02 DragonFly

Tool for listing Modify, Access, Create timestamps from files

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
GPLv2
Categories
security
Package size
12.0 KiB, 30.4 KiB installed

Description

mac-robber is a Forensics & Incident Response tool used to collect the Modified, Access, and Change (MAC) times from allocated files. It recursively reads MAC times of files and directories and prints them in 'time machine' format to STDOUT. This format is the same that the mactime tool from The Coroners Toolkit (TCT) reads.

mac-robber is based on the grave-robber tool from The Coroners Toolkit (TCT) when using the '-m' flag, except it does not require Perl!

In the other systems

SystemPortVersion
DragonFlysecurity/mac-robber1.02
FreeBSDsecurity/mac-robber1.02
OpenBSDsysutils/mac-robber1.02

Install

Binary package:

pkg install mac-robber

From DPorts:

cd /usr/dports/security/mac-robber && make install clean

Dependencies

No port depends on this one.