Type UTMP

Details

Defined Constant	Type_UTMP
File Type Value	997
Parent Type	None
Carve	Yes
Format Details	No
Carve Meta Data	Yes
MIME Type	application/octet-stream
Filename Extension	utmp

UTMP

Description

Records various unix system status items.

External links

• Wikipedia

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Carve Meta Data

When Truxton carves this file, it can populate the following columns in the [File] table:

• Created - When the file was created
• LastWrite - When the file was last modified
• Name - The name of the file