NBTempoW - make your forensic timelines in Windows

Ho realizzato NBTempoW ossia la versione per Windows di NBTempo, per fare le timeline partendo da un file immagine, anche se splittato basta prendere solo il primo chunk.

E' stato realizzato con Lazarus (Delphi IDE), spero vi piaccia ;-)

https://github.com/nannib/NBTEMPOW

NBTempoW is a forensic tool for making timelines from block devices image files (raw, ewf,etc.). It uses TSK (The Sleuthkit https://www.sleuthkit.org/) and it has been developed with Lazarus V. 1.6.2 (Delphi compatible cross-platform IDE for Rapid Application Development). It runs only in Windows. If the device image file is splitted, you can select just the first chunk.

Author: Nanni Bassetti - http://www.nannibassetti.com