Type UTMP - Revision history

Sam at 21:28, 21 May 2024

2024-05-21T21:28:10Z

Sam at 11:15, 10 March 2024

2024-03-10T11:15:59Z

Sam at 20:26, 15 January 2024

2024-01-15T20:26:10Z

Sam at 12:53, 15 January 2024

2024-01-15T12:53:39Z

Sam at 10:27, 15 January 2024

2024-01-15T10:27:52Z

Sam at 14:46, 14 January 2024

2024-01-14T14:46:47Z

Sam at 21:10, 14 December 2021

2021-12-14T21:10:01Z

Sam: Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | `Type_UTMP` |- | File Type Value | 997 |- | Parent Type | None |- | Carve | Yes |- | F..."

2021-12-14T21:04:30Z

Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_UTMP</code> |- | File Type Value | 997 |- | Parent Type | None |- | Carve | Yes |- | F..."

New page

{| style="float:right;border:1px solid black"
|+ Details
| Defined Constant
| <code>Type_UTMP</code>
|-
| File Type Value
| 997
|-
| Parent Type
| None
|-
| Carve
| Yes
|-
| Format Details
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>utmp</code>
|}

UTMP

=Description=
Records various unix system status items.

=Details=
* [https://en.wikipedia.org/wiki/Utmp Wikipedia]

@@ Line 30: / Line 30: @@
 =Description=
 Records various unix system status items.
 =Truxton Exploiters=
@@ Line 43: / Line 40: @@
 * <code>LastWrite</code> - When the file was last modified
 * <code>Name</code> - The name of the file

@@ Line 41: / Line 41: @@
 When Truxton carves this file, it can populate the following columns in the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table:
 * <code>Created</code> - When the file was created
-* <code>Modified</code> - When the file was last modified
+* <code>LastWrite</code> - When the file was last modified
 * <code>Name</code> - The name of the file

@@ Line 16: / Line 16: @@
 | No
 |-
-| File Meta Data
+| Carve Meta Data
 | Yes
 |-
@@ Line 38: / Line 38: @@
 * [[Expand]]
-=File Meta Data=
+=Carve Meta Data=
 When Truxton carves this file, it can populate the following columns in the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table:
 * <code>Created</code> - When the file was created
 * <code>Modified</code> - When the file was last modified
 * <code>Name</code> - The name of the file

@@ Line 15: / Line 15: @@
 | Format Details
 | No
 |-
 | MIME Type
@@ Line 34: / Line 37: @@
 This file type is handled by the following ETLs:
 * [[Expand]]

@@ Line 1: / Line 1: @@
 {| style="float:right;border:1px solid black"
-|+ Details
+|+ [[Type_Google_Drive_Snapshot|<<]] Details [[Type_Generic_Password_Dump|>>]]
 | Defined Constant
 | <code>Type_UTMP</code>

@@ Line 28: / Line 28: @@
 Records various unix system status items.
-=Details=
+=External links=
 * [https://en.wikipedia.org/wiki/Utmp Wikipedia]