Export file keeping the original MAC times

Hello everyone!

Is it possible to export files from an image using Autopsy or The Sleuthkit and keep the original MAC times? So far I’ve been using EnCase for this task, but I do not enjoy that program at all.

1 Like