Difference between revisions of "Type UTMP"
Jump to navigation
Jump to search
| Line 15: | Line 15: | ||
| Format Details | | Format Details | ||
| No | | No | ||
| + | |- | ||
| + | | File Meta Data | ||
| + | | Yes | ||
|- | |- | ||
| MIME Type | | MIME Type | ||
| Line 34: | Line 37: | ||
This file type is handled by the following ETLs: | This file type is handled by the following ETLs: | ||
* [[Expand]] | * [[Expand]] | ||
| + | |||
| + | =File Meta Data= | ||
| + | When Truxton carves this file, it can populate the following columns in the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table: | ||
| + | * <code>Created</code> - When the file was created | ||
| + | * <code>Modified</code> - When the file was last modified | ||
| + | * <code>Name</code> - The name of the file | ||
Revision as of 10:46, 14 January 2024
| Defined Constant | Type_UTMP
|
| File Type Value | 997 |
| Parent Type | None |
| Carve | Yes |
| Format Details | No |
| File Meta Data | Yes |
| MIME Type | application/octet-stream
|
| Filename Extension | utmp
|
UTMP
Description
Records various unix system status items.
External links
Truxton Exploiters
This file type is handled by the following ETLs:
File Meta Data
When Truxton carves this file, it can populate the following columns in the [File] table:
Created- When the file was createdModified- When the file was last modifiedName- The name of the file
