time zone

Tool requests, development, and troubleshooting topics related to TSK.

Moderator: carrier

time zone

Postby jennifer » Wed Jul 27, 2016 9:17 pm

When using the tsk_loaddb command we create the tsk_image_info image table and there is a timezone column but I found that it is often blank, so where is the information supposed to be coming from? I am using the real data corpus hosted by the naval postgraduate school. We use encase to make electronic duplicates of hard drives. I am wondering if it is true to say that the examiner simply did not input the time zone information.
Posts: 1
Joined: Wed Jul 27, 2016 9:11 pm

Return to The Sleuth Kit (TSK)

Who is online

Users browsing this forum: No registered users and 1 guest