Carving utmp records for intrusion analysis

I posted about Carving utmp records for intrusion analysis using utmp scanner of bulk_extractor-rec