Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis
MIT License
1.38k stars 274 forks source link

Forensic Timeline Type #156

Open beleka opened 6 years ago

beleka commented 6 years ago

Hello, i'm trying to generate a gource schema with the Get-ForensicTimeline cmdlet. The problem is that when i get the timeline from the tool , and i use ConvertTo-Gource, i get an error because the type of the data in the timeline variable isn't Forensic Timeline. What can i do?

$timeline = Get-ForensicTimeline -VolumeName C: $timelinemod = $timeline | Where-Object {($.Date -gt $start) -and ($_.Date -lt $end)} | Sort-Object Date | ConvertTo-Gource


[ForensicTimeline] type can't be found. En C:\Program Files\WindowsPowerShell\Modules\PowerForensics\PowerForensics.psm1: 414 Carácter: 9