mac-robber is a forensics and incident response program that collects 
Modified, Access, and Change (MAC) times from files. 
Its output can be used as input to the 'mactime' tool (part of The 
Sleuth Kit) to make a time line of file activity.
