head	1.2;
access;
symbols
	RELEASE_8_3_0:1.2
	RELEASE_9_0_0:1.2
	RELEASE_7_4_0:1.2
	RELEASE_8_2_0:1.2
	RELEASE_6_EOL:1.2
	RELEASE_8_1_0:1.2
	RELEASE_7_3_0:1.2
	RELEASE_8_0_0:1.2
	RELEASE_7_2_0:1.2
	RELEASE_7_1_0:1.2
	RELEASE_6_4_0:1.2
	RELEASE_5_EOL:1.2
	RELEASE_7_0_0:1.2
	RELEASE_6_3_0:1.2
	PRE_XORG_7:1.2
	RELEASE_4_EOL:1.2
	RELEASE_6_2_0:1.2
	RELEASE_6_1_0:1.2
	RELEASE_5_5_0:1.2
	RELEASE_6_0_0:1.2
	RELEASE_5_4_0:1.2
	RELEASE_4_11_0:1.2
	RELEASE_5_3_0:1.2
	RELEASE_4_10_0:1.1
	RELEASE_5_2_1:1.1
	RELEASE_5_2_0:1.1
	RELEASE_4_9_0:1.1
	RELEASE_5_1_0:1.1
	RELEASE_4_8_0:1.1;
locks; strict;
comment	@# @;


1.2
date	2004.05.25.15.35.42;	author pav;	state Exp;
branches;
next	1.1;

1.1
date	2003.02.17.09.19.01;	author markp;	state Exp;
branches;
next	;


desc
@@


1.2
log
@- Fix fetch, project moved to Sourceforge
- Update WWW
- Update distinfo, the file was rerolled with
  * added copy of GPL
  * minor updates to documentation
  * updates to email addresses and URLs

PR:		ports/67178
Submitted by:	Roman Neuhauser <neuhauser@@chello.cz>
@
text
@mac-robber is a Forensics & Incident Response tool used to collect
the Modified, Access, and Change (MAC) times from allocated files.
It recursively reads MAC times of files and directories and prints
them in 'time machine' format to STDOUT.  This format is the same
that the mactime tool from The Coroners Toolkit (TCT) reads.

mac-robber is based on the grave-robber tool from The Coroners
Toolkit (TCT) when using the '-m' flag, except it does not require
Perl!

WWW: http://www.sleuthkit.org/mac-robber/desc.php
@


1.1
log
@Add mac-robber 1.00, a tool for listing Modify, Access, Create
timestamps from files.

PR:		47011
Submitted by:	Yonatan <Yonatan@@xpert.com>
@
text
@d11 1
a11 1
WWW: http://www.atstake.com/research/tools/forensic/
@

