Add UsnCorrelation

sleuthkit · Jan 13, 2024 · 902a504 · 902a504
1 parent eb6fded
commit 902a504
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/ContentViewerModules/UsnCorrelation/README.md b/ContentViewerModules/UsnCorrelation/README.md
@@ -0,0 +1,7 @@
+- __Description:__ Uses `$UsnJrnl` to create file history timelines and recover information about deleted files.
+- __Author:__ Oshawk
+- __Minimum Autopsy version:__ 4.21.0 (no others tested)
+- __Module Location__: Here (and https://github.com/Oshawk/usn-correlation)
+- __Website:__ https://github.com/Oshawk/usn-correlation
+- __Source Code:__ https://github.com/Oshawk/usn-correlation
+- __License:__ MIT
diff --git a/ContentViewerModules/UsnCorrelation/uk-oshawk-UsnCorrelation.nbm b/ContentViewerModules/UsnCorrelation/uk-oshawk-UsnCorrelation.nbm
diff --git a/IngestModules/UsnCorrelation b/IngestModules/UsnCorrelation
@@ -0,0 +1 @@
+ContentViewerModules/UsnCorrelation