FTimes in Action

Even though FTimes was originally designed as a workbench tool for the forensic practitioner, it and the way it is used continue to evolve. The following list summarizes the various applications that FTimes can and does support.

• Integrity Monitoring
• All Files
• System Critical Files
• Mission and Application Critical Files
• Multiple Profiles
• Evidence Collection
• Live Systems
• Imaged Systems
• Remote Systems
• Intrusion Analysis
• Hidden Directories, Files, and Streams
• Known vs Unknown Signatures
• String Searches
• Timestamp Analysis
• Administration
• Backup and Restore Validation
• Software Installation and Removal

more...