OpenText Tableau Forensic TX1 Imager
The Information Company 123
4.5.2.5 File date
The File Date search parameter restricts the search to apply to only files in timestamp
ranges, as follows:
• File Dates >=
• File Dates <=
• File Dates in Range
File Dates >= lets you specify a date and only match files with one or more timestamps
on or after the given date.
File Dates <= lets you specify a date and will only match files with one or more
timestamps on or before the given date.
File Dates in Range lets you specify two dates and will only match files with one or more
timestamps on or between the two given dates.
Dates are entered by typing them into the text boxes in YYY-MM-DD format. Dates will
match the rule if any of the TX1 supported timestamps for that filesystem match the File
Date setting.
Note: Some filesystem types, particularly FAT, do not support time zone independent
timestamps. There is no way to determine the time zone used for FAT time stamps
created by Windows. TX1 treats these timestamps as if created with a UTC+0000
timestamp.
4.5.3 About the logical imaging process
4.5.3.1 Logical image job status
Once a logical image job has been started, the Job Status screen will automatically be
displayed, as shown below.
Copyright © 2022 Open Text. All rights reserved. Trademarks owned by Open Text.
To Next Page
Loading...