Type UTMP
Jump to navigation
Jump to search
| Defined Constant | Type_UTMP
|
| File Type Value | 997 |
| Parent Type | None |
| Carve | Yes |
| Format Details | No |
| Carve Meta Data | Yes |
| MIME Type | application/octet-stream
|
| Filename Extension | utmp
|
UTMP
Description
Records various unix system status items.
Carve Meta Data
When Truxton carves this file, it can populate the following columns in the [File] table:
Created- When the file was createdLastWrite- When the file was last modifiedName- The name of the file
