Difference between pages "FTimes" and "IPhone Mail Header Format"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Fixed Infobox, added Limitations, DFRWS challange info.)
 
(New page: The Apple iPhone mail program uses a header similar to Apple Mail, but with some minor changes. The format of the message id is the name, but there is an extra field: X-Mailer: ...)
 
Line 1: Line 1:
{{Infobox_Software |
+
The [[Apple iPhone]] mail program uses a header similar to [[Apple Mail]], but with some minor changes. The format of the message id is the name, but there is an extra field:
  name = FTimes |
+
  maintainer = [[Klayton Monroe]] |
+
  os = {{Multiplatform}} |
+
  genre = [[Evidence collection]] |
+
  license = {{BSD}} |
+
  website = [http://ftimes.sourceforge.net/ ftimes.sf.net] |
+
}}
+
  
'''FTimes''', short for '''File Topography and Integrity Monitoring on an Enterprise Scale''' is a system baselining and evidence collection tool designed for incident response, evidence collection (alternate data streams, hidden files), content integrity monitoring, intrusion analysis and computer forensics.
+
  X-Mailer: iPhone Mail (3B48b)
  
== Limitations ==
+
== See Also ==
 
+
* [[Apple Mail Header Format]]
FTimes does not collect all possible attributes on every supported platform.
+
 
+
== External Links ==
+
 
+
* [http://ftimes.sourceforge.net/ The FTimes Project Homepage]
+
* [http://unixsadm.blogspot.com/2007/11/building-ftimes-on-windows-using-visual.html Building FTimes on Windows using Visual Studio]
+
* [http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/ DFRWS 2006 File Carving Challenge - using FTimes]
+

Latest revision as of 17:31, 27 December 2007

The Apple iPhone mail program uses a header similar to Apple Mail, but with some minor changes. The format of the message id is the name, but there is an extra field:

 X-Mailer: iPhone Mail (3B48b)

See Also