Skip to content

Instantly share code, notes, and snippets.

@obsidianforensics
Created May 24, 2015 18:10
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save obsidianforensics/aaeb6ebf4dd675befdcf to your computer and use it in GitHub Desktop.
Save obsidianforensics/aaeb6ebf4dd675befdcf to your computer and use it in GitHub Desktop.
Sample from Gource-formatted usn.log
1424658814|USN|M|/Users/user1/AppData/Local/Temp/logEF94.txt
1424658814|USN|A|/Users/user1/AppData/Local/Temp/testmem.exe
1424658814|USN|M|/Users/user1/AppData/Local/Temp/testmem.exe
1424658814|USN|M|/Users/user1/AppData/Local/Temp/testmem.exe
1424658814|USN|D|/Users/user1/Downloads/voice#5734223/voice.exe
1424658814|USN|A|/Windows/Prefetch/VOICE.EXE-78467D55.pf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment