This article has been indexed from SANS Internet Storm Center, InfoCON: green
Almost 4 years ago, I wrote a python version of mac-robber. I use it fairly regularly at $dayjob. This past week, one of my co-workers was using it, but realized that it hashes large files a little too slowly. He decided to use mac-robber.py to collect the MAC times and do the hashing separately so he could limit the hashes to to files under a certain size. That sounded reasonable, so I've added a switch (-s or –size). If hashing is turned on the new switch will limit the hashing to files under the given size.
Read the original article: Update: mac-robber.py, (Sun, Jun 13th)